Move encryption into S3 backend.