Add S3 perms needed for xcloner