Check for access to object before signing URL

[robbles]

This ensures the bucket and key exist, and the credentials in use have access to them.

Without this check, a signed URL will always be produced, but it's not guaranteed to ever work.