@thomasfuchs It's a funny bug. I'm not one for cheap dunks on devs, but this was clearly a security issue with solid prior art (imagine if Let's Encrypt let me claim S3!), so I'm a little ok with a bit of dunking.