<p>okay, it looks like this is solved by enabling bucket versioning rather than reducing permissions</p><p>from my testing, restic appears to be fit for purpose (is able to execute basic commands like "list versions" without me waiting for it to do gods know what for several minutes)</p>
