Using list_roles instead of get_user for sanity check

If you try to use iam_syncr as an assumed role, get-user will complain
and thus that check doesn't really work.

This check does still require some roles to already be defined. I'll fix
that if anyone wants me to.