s3-security: use shared Security Access Masks Rights.