cloud-init could be made to expose sensitive information.