s3-auth Avoid redundant copies in create_local_token()