bucket: return 404 instead of 403 if bucket to be processed was not found
meta: added /read-bucket/ handler which returns pretty-formatted bucket metadata json. Metadata reading requires write permission to prevent reader from getting writer keys
acl: added readonly bit
meta: forbid bucket metadata reading to wildcard and readonly users