passwordutil: implement a basic refresh loop

[mattrobenolt]

This then knocks down the TTL for credentials from 6 hours to 5 minutes

• refreshing every 2.5 minutes.