does Pulumi support S3 client side encryption with custom key? Same question for Azure storage.