Round off the S3 SSE encryption support with everything needed to safely ship it.
The core code is in, along with tests, so this covers the details
- docs with examples, including JCEKS files
- keeping secrets secret
- any more tests, including scale ones (huge file, rename)
- I'll add a KMS test to my (github) spark suite