first steps towards using IAM & sensible key mgmt
bugfix
use awsuser

 - mkdir -p is helpful during testing as it stops mkdir barfing
   if ~/data already exists
first steps to path independence

 - should be in a position [soon] to rely on $PATH