looks through an S3 bucket, encrypting anything that's not already encrypted - View it on GitHub