I don't understand why S3 compatible storages are even providing encryption where they are holding the key. What's the point of that encryption even? Furtunately gocryptfs exists.