Non-Read Operations should be done with the ManageIQ User credentials

[chessbyte]

ManageIQ typically uses OpenStack credentials that have a wide scope, in order to collect as much inventory as possible. When using the same credentials for non-read operations, it is impossible to tell from OpenStack who created or updated an entity. It also makes associating an entity with an OpenStack project harder.

Wondering if OpenStack Trusts can be used to impersonate the user logged into ManageIQ or have the user provide an alternate set of credentials for a provider.