Add OS X Keychain credentials provider

The new OSXKeychainProvider will be installed when run in an
OS X environment. If the access_key_id is specified in either
static credentials or via environment without the secret access key,
this provider will ask the keychain for it.