Use server-side encryption and RRS

Use S3's server-side encryption and Reduced Redundancy Storage by default.