fix `open` w/ S3 signed urls