[WIP] Start adding IAM role based authentication

See #6

This pull request is super-early, since it's not complete yet. Feel free to
close it until it's ready if that is your preferred style.

I'd like feedback at this stage in case I'm doing something bad.

I may not have any more time until tomorrow for this.