support for temporary credentials - profiles/roles