Parse role specification more robustly

[mgab]

Handle some variation on the role specification that seem to be supported both by AWS and Google.

• Whitespace next to the coma that separates role and provider

• Inverted order of provider,role (instead of role,provider)

  Fixes #163