0.16.0 Extend S3 bucket policy to ensure encryption-in-transit

what

• This change extends the S3 bucket policy to enforce encryption in
  transit

why

• Whilst the current option policy ensures server-side encryption,
  encryption of the transport mechanism isn't enforced.

refs

• https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-ssl-requests-only.html