The four S3 misconfigs behind most breaches, and how to prevent them with SCPs.