decision to make bucket (and not bucket + account id surrogate) a sole key for access was one of most annoying mistakes in S3 design