s3-auth: rework default auth methods around the lp_server_role() parameter