Maybe there's a way to create a key for each user eventually? Then they can use their own key to upload to their folder.