Add support for S3 server side encryption and storage class

[patdowney]

This PR adds optional support for specifying S3 server side encryption values and thought I'd add support for optionally specifying the storage class whilst in there.

I took a guess at appropriate environment variable names, happy to change them if there are better options