ami: specify user id as param
bundle: change ec2_cert path
(untested b/c nocrypto and cryptokit clash)
goodbye cryptokit
goodbye cryptokit for real
ami: optional ec2_cert param