Set files from S3 to the not public by default just to be safe.