Policy forbids issuing for name on Amazon EC2 domain

[jsha]

@pfg is correct. We specifically list the amazonaws domans because we know they are ephemeral. We might certify one as belonging to you today, and then it could belong to someone else tomorrow.