* Only apply dynamic AWS settings to dynamic AWS dbs
Dynamic database resource matchers can include AWS settings to assume an
AWS IAM role when they match a database.
The settings should only be applied to dynamic AWS databases.
The db service will no longer apply these settings to non-AWS databases.
It will also no longer apply these settings to databases discovered by
the legacy cloud watchers in db_service.aws - the cloud watchers have an
assume_role_arn setting that should not be overridden by dynamic
database matcher settings.
* fix reconcilitation race