* moved AWS_*_KEY values into environment to attempt to work around issue with commands not honoring -I / -S
* fixed up logic while looping over users