It's harder to leak multiple S3 keys than a single postgres key.