TIL: IP protection on a S3 bucket does not work if accessed via HTTPs url (since that is a CloudFront).