add the rds-specific permission to list tags

RDS resources can have a variety of tags, we need some extra permisisons
to list them. The functionality to crawl them has not yet been
implemented, but this permission is a step in that direction.