s3:auth:check_sam_security: create (and use) a common exit point