IamRoleServiceAccount without a policy not possible

[david-freistrom]

Can we set the policy in the IamRoleServiceAccount CRD to be optional? Sometimes we don't have any policies to attach. We need just a IAM role bind to our service account. It should be a 1:0..n relation like the Role CRD can be created without an attached Policy.