We just released a new version that should fix issues with bucket-scoped tokens and rclone. HeadBucket is now allowed on a bucket-scoped token, so you should not need the no_check_bucket option. Let me know if the problem persists!
I see a couple people ran into this yesterday ( @sohum @FloppyDisk )