Files uploaded to s3 are public