fix issue in sig4 canonical_headers()
upgrade flutil (flu_zero_and_free())
implement sig4 signing_key() (1st pass)