I could use a review on this s3 url handler backend change when someone has time. Do you think its worth putting this behind a new option? So the old credential signing mechanism is still available if needed? https://github.com/pantsbuild/pants/pull/21956