investigate options for streaming from the client
I'd look at Tubes first, to see if we can adapt it to our purposes of composing the pipe: read -> encrypt -> upload download -> decrypt -> write
without fitting all the object several times in ram.
some interesting thread also re. AWS streaming https://bugs.launchpad.net/txaws/+bug/767205