added HMAC-SHA1 to drop the openssl dependency
added a note about S3