But if the service doesn't have a ``signature_version`` then the endpoint would not have an ``auth`` associated with it.  If we want operations to be able to not just turn off auth but to also be able to specify an auth different than the service we would need to make a few more changes here.

I'm not opposed to that and it sounds like the most general solution, just pointing it out.