s3-security: move ALL_SECURITY_INFORMATION to the only user.