awscli: improve sandboxing

PRing to get new bottles.