[20181019173240] App Lock, S3 Resource Encryption, and Bug Fixes

Adds two new commands convox apps lock and convox apps unlock to enable/disable termination protection.

S3 resources are now encrypted at rest by default.