Make the AWS keys purpose-specific