Add AWS.Credentials.expiryWindow to attempt refresh before credentials hit expireTime