s3:rpc_server: wrap make_auth4_context() into {become,unbecome}_root()