Added support for server-side encryption

Added a --with-sse flag (default false, for back-compat) which
simply passes encrypt_key=True to boto. This enables S3's AES-256
serverside encryption without affecting retrieval.

Requires boto 2.1 or greater.