Renovate: Docker quay.io label fetching error

[rarkins]

Example image: https://quay.io/repository/jetstack/cert-manager-webhook

        "body": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>InvalidArgument</Code><Message>Only one auth mechanism allowed; only the X-Amz-Algorithm query parameter, Signature query string parameter or the Authorization header should be specified</Message></Error>",
        "message": "Response code 400 (Bad Request)",
        "stack": "HTTPError: Response code 400 (Bad Request)\n    at EventEmitter.emitter.on (/home/ubuntu/renovateapp/node_modules/got/source/as-promise.js:74:19)\n    at process._tickCallback (internal/process/next_tick.js:68:7)"
    },

[rarkins]

What Renovate type are you using?

Hosted app

Describe the bug

Authenticated requests to quay.io fail

Did you see anything helpful in debug logs?

<Error>
  <Code>InvalidArgument</Code>
  <Message>Only one auth mechanism allowed; only the X-Amz-Algorithm query parameter, Signature query string parameter or the Authorization header should be specified</Message>
  <ArgumentName>Authorization</ArgumentName>
  <ArgumentValue>Bearer X</ArgumentValue>
  <RequestId>5C0B5B8BC32E9D98</RequestId>
  <HostId>nAf6NG9eaCt3H7kHLIaXT7nM1gmNwJ76xo9Q8xx+gwBnhqflnPi48yDCvc4oGDu0wkM4yuj+1EQ=</HostId>
</Error>

To Reproduce

I'm not sure exactly. But it's limited to quay.io

Additional context

It gets printed as part of a logger.warn: "Unknown error getting Docker labels"

[ChipWolf]

Reproduced here.