add option to obtain security tokens from IMDS instead of STS