security: ensure the merge of libcli/security doesn't change s3 behaviour