new search rules for aws keys file: (1) abs path of command line arg, (2) CIRRUS_KEYS env var, (3) aws.json in current dir