Upload controller and server-side encryption

Consented session.