s3:auth Add comment to clarify usage of session keys.