allow a get w/o a length, for full item return
enable fetching auth w/ a known account direct from s3 first as that's the best