make the wagon actually private and upgrade the s3 api