I read the documentation but can't determine if sops supports credentials via IAM roles. Can anyone with experience chime in?