requireSignedUrls