allow copy from/to to operate on s3 without access credentials