Upload controller and server-side encryption

No need to be in the interface.