When attempting to pass Authorization headers, its accessible via events.headers directly, but not through the event object via event.headers. Seems to be related to #437#464.
The patch suggested by #437 seems to work as expected, but would like to see this implemented into this library.