[backport-1.6]: Allow users to provide unencrypted s3 cert for backup

A solution for issue #4138 (closed) needs to be backported to 1.6.x