This commit changes the SSM scanner to expect values to be base64
encoded. This is required because SSM parameter values don't accept all
the strings we need in aws-auth. For example, the string
`{{EC2PrivateDNSName}}` is not allowed in SSM parameters because of the
`{{}}` characters.