use AWS S3 server-side encryption (SSE) by default

Use AWS S3 server-side encryption (SSE) by default per #33.

There is an informative discussion of the merits of AWS S3 SSE on [security.stackexchange.com](https://security.stackexchange.com/questions/8765/what-does-amazons-s3-server-side-encryption-protect-against)