s3: Don't fail authentication when one or some group of require-membership-of is...