Only perform permission check on saved bucket and path to cope with more...

... complex IAM policies

Resolves #168