**Use case**
With S3, you have to send the header `x-amz-server-side-encryption-customer-key` and `x-amz-server-side-encryption-customer-key-md5` if the resource is server side encrypted.

https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeysSSEUsingRESTAPI.html
https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html

**Describe the solution you'd like**
Ability to set this in the query.
bool use_environment_credentials);
    PocoHTTPClientConfiguration createClientConfiguration(
        const RemoteHostFilter & remote_host_filter,
        unsigned int s3_max_redirects);
private:
    ClientFactory();
private:
    Aws::SDKOptions aws_options;
};
/**
 * Represents S3 URI.
 *
 * The following patterns are allowed:
 * s3://bucket/key
 * http(s)://endpoint/bucket/key
 */
struct URI
{
    Poco::URI uri;
    
    String endpoint;
    String bucket;
    String key;
    String storage_name;
    bool is_virtual_hosted_style;
    explicit URI(const Poco::URI & uri_);
};
}
#endif