Support discovering credentials

Right now access key id and secret access key are required settings, this makes it easier for inexperiences users to detect misconfigurations so it should continue to be the default.

A new setting could be added to enable credentials discovery without statically set credentials.