Improving access control for S3.store