ensure instance profile is used instead of bootstrap credentials

We no longer require any credentials on the air-gapped'd jump-box and rely only on Instance Profile. There is a bug in the initial release where the CAPA-Controller would stop authenticating with AWS when the instance profile credentials expired.