s3:auth:check_sam_security: null out sampass after it has been stolen.