aws-upload-cert: section comments

clowncar: supports -L for not tweaking the password

commit: TO-DOs

added crate and pem-foreach