S3Proxy 4.1.1

• Accept credentials that expire, #1161
• Reject a V4 request bearing an unsigned x-amz- header
• Sign the V2 subresources that select an operation

Thanks @orenyomtov for privately reporting a security vulnerability!