s3:auth: add S-1-22-X-Y sids to the local token