b3c8a1864f
anonymous users are never allowed to listBuckets(), we do not need to further validate the policy, we can simply reject if credentials are empty.