Minor Description
AWS S3 now has the notion of default bucket encryption http://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETencryption.html
Once set, all data uploaded is automatically encrypted, without needing to set any client options
We should provide that info in the s3guard bucket-info command, so you can see that data being uploaded really is encrypted.