server-side encryption -- use ENV var to enable AES256 on S3
Merge branch 'server-side-encryption'