add option :access_key_id_key
handle nonce in query3 client
tweak authorization header