MantaClient disobeys algorithm arg passed to signURL(), and allowing
both algorithm and sign to auth's signUrl() is brittle.