How does authentication work in this scheme? The view uses separate S3 credentials, which are configured per external user consuming the database?