[aws|s3] Support SSE encryption with customer key