cfn_helper.py exposes credentials through world-readable tmpfile

[hardys]

cfn_helper.py creates /tmp/last_metadata which is world-readable and can contain the AWS credentials (as stored in /etc/cfn/cfn-credentials), we need to fix the permissions and/or stop storing raw metadata in temporary locations.