s3-net: document "idmap check"