Allow users to provide raw pem s3 cert for backup

As a follow up from this discussion sylva-projects/sylva-elements/helm-charts/sylva-capi-cluster!994 (comment 3411946186), currently we are assuming that user will be providing encrypted secrets for backup. They must be providing the cert directly