s3: Make the implicit reference to Protocol in mask_match() explicit