[20170112224615] IAM Lockdown

[ddollar]

This release locks down the IAM policy used by the Rack itself.

See #1063 for details. [@MiguelMoll]