So Erisa noticed that this may not be entirely fixed. Apparently “rclone copy” issues a PutBucket command to check for a bucket’s existence, which is weird, but also un-fixable from our end (cannot allow bucket creates from a scoped token). We’re not sure what causes rclone to do this (and why it is apparently sending out HeadBucket for you?)
What command are you using?