Changing access-key and secret-key

[sphamba]

Dear JuiceFS team,

I have setup an S3 storage using juicefs format, providing the command with an access key and a secret key with read-write permissions in the S3. I then use juicefs mount without the need to provide the keys again, which I assume are stored in the database file (sqlite3).

I now want to remove or change the keys for read-only ones. I am able to use juicefs config to remove the keys. However, I am not able to replace them with read-only keys, getting the following error:

<FATAL>: Failed to put: AccessDenied: Access Denied

Furthermore, even with the keys removed from the database file, I am still able to mount the S3 storage with write access.

Is this intendeed behavior? How should I proceed to replace the keys?
Thank you!

[sphamba]

Apparently, JuiceFS reads credentials from ~/.aws/credentials if they are not in the database, even though this is not specified in the Documentation.
To modify the keys with read-only ones, I used the --force option.