concurrent uploads and cleanup
sample IAM policy for destination bucket
make ACL configurable (for private buckets)