Auth + tweaks

Add API auth secrets to prevent anonymous archiving.
Make S3 blobs retrieve data on-demand so instantiation is cheap
Fix some bugs