require leading slash in bucket name