Iam role

There was a bug in in the handling of iam credentials refresh that meant that non iam credentials got overwritten.

These new commits fix it