what is up with 3rd party s3 providers not giving you scoped raccess keys
This is a placeholder, overwrite this by putting a file at
$STATIC_DIR/static/terms-of-service.html
See the Static Directory docs for more info.