s3-auth: Only allow LM_KEY cryptography when extra options are set