validate bucket key just at store time; refactor FilesystemBucket