tighten perms on the s3fs passwd file
mount the buckets