"application/vnd.renlearn.rlprint",
				"application/vnd.rim.cod",
				"application/vnd.rn-realmedia",
				"application/vnd.route66.link66+xml",
				"application/vnd.ruckus.download",
				"application/vnd.s3sms",
				"application/vnd.sbm.cid",
				"application/vnd.sbm.mid2",
				"application/vnd.scribus",
				"application/vnd.sealed.3df",
				"application/vnd.sealed.csf",
				"application/vnd.sealed.doc",

	m := cloneMSS(metadata)

	switch kind, _ := crypto.IsEncrypted(metadata); kind {
	case crypto.S3:
		m[xhttp.AmzServerSideEncryption] = xhttp.AmzEncryptionAES
	case crypto.S3KMS:
		m[xhttp.AmzServerSideEncryption] = xhttp.AmzEncryptionKMS
		m[xhttp.AmzServerSideEncryptionKmsID] = kmsKeyIDFromMetadata(metadata)
		if kmsCtx, ok := metadata[crypto.MetaContext]; ok {

			}
			objectEncryptionKey, err = decryptObjectMeta(baseKey, bucket, object, fi.Metadata)
			if err != nil {
				return oi, err
			}
		}
	case crypto.S3, crypto.S3KMS:
		objectEncryptionKey, err = decryptObjectMeta(nil, bucket, object, fi.Metadata)
		if err != nil {
			return oi, err
		}
	}
	if len(objectEncryptionKey) == 32 {
		var key crypto.ObjectKey