refresh keys if needed when getting aws_creds