s3:auth_sam: replace confusing FALL_THROUGH; with break;