Encryption

KMSKey is the key to encrypt uploads with. S3 mounts take a KMS key ARN in the mount's region.