add IAM and entitlements to SDK