allow for bucket encryption