[20160812185020] Security Improvements and General Enhancements

Thanks to some great work by @MiguelMoll we are locking down the IAM permissions both needed and created by Convox. This work begins in #1026.

General Enhancements