switch -r -R flags
add logic for iam stuff

This is mostly additive. It will remove a user from groups, but won't
delete them.
add todos
remove release date...
Merge branch 'feature/iam' into develop