Adding support for signing using IAM User temporary credentials

Here are more details in the S3 Documentation.

Does this approach sound okay, or would you rather that the consumer of the API manually add a header to include the security token in the header?