uploads3 sets permission to public-read