It has a similar to ec2tokens logic, but doesn't return TokenID. Used for verification only. https://github.com/openstack/keystone/blob/stable/train/keystone/api/s3tokens.py#L95