On that note, does anyone know a working S3 policy script to prevent hotlinking outside your domain/bucket? I can't get any to work.