I did something very similar a few years ago with http://stackmonkey.com. Note the site's cert is currently invalid and there are no pool controllers running, so you can't start a server until someone starts a pool controller. The idea was to tie starts of instances to something decentralized (Bitcoin) and then securely fetch the configuration data from somewhere you control. Thinking IPFS for that in the next iteration.