s3_write_result: default to key permissions same as bucket