testing S3 access with encrypted env vars