Rework IAM documentation for directory buckets (#1455)