documented s3_secure in README