Added image filtering policies for EC2 backend

Supported:
* `all`         (everything, really slow)
* `only_listed` (list of allowed images)
* `only_owned`  (images owned by the user)