Readme could explain key-pairs vs KMS more clearly

[stevebuik]

As a KMS noob, I got a bit confused when initially setting up. I thought I needed to create a KMS master but what I needed was a keypair for the EC2 instances.

It became clear when the tf apply failed but the readme could be more explicit about the distinction.