executor: allow the client to share bucket access to the job

This enables sharing sensitive buckets with machines, and tie this access to the job. This way, if the credentials to the bucket leak, they cannot be re-used later on.

@chturne: This is untested as I am still working on it and working on the interface, but I think I am getting somewhere!