Use path_style S3 URLs so we don't encounter host mismatch issues with SSL certificates, should the bucket contain the '.' character.