Update IAM roles when policies have changed. Fixes #139.