Alluxio's S3 proxy skipped signature verification, and everyone was root

CVE-2026-79787: Alluxio's S3 REST proxy did not verify AWS Signature Version 4 by default, so any caller could claim any identity.