HIPAA-compliant CarrierWave uploads to TrueVault