All authenticated requests must include an Authorization header:
Authorization
keyId
signature
timestamp