Keymaker

===============================

- Allow configurable username suffix in keymaker role config

- Auto-configure assume role permissions in keymaker configure

- Add missing iam:GetGroup permission for keymaker sync_groups (42)

===============================

- Remove unused dependency

===============================

- Produce more readable log line when no config is found in role
description

===============================

- Fix user autovivification

===============================

- For the avoidance of doubt, this tool is stable.

===============================

- Remove unnecessary PAM config. Fixes 23

- Fix group sync on default iam_linux_group_prefix. Fixes 40