Ensure ordering for CommonPrefixes
Emit InvalidArgument for malformed Authorization

Also keep identity and signature as distinct values.  References #5.