s3-auth: in make_user_info_for_reply_enc make sure to check length and data