Add more clarity regarding EC2 credential access via applications