Background
At the moment, Cloud Pipeline allows performing upload/download operations for any authorized data storage.
But certain storages may contain sensitive data, which shall not be copied anywhere outside that storage.
Shall be considered for the object storage only

Approach

• We shall list all the available "data-leak" routes (e.g. download from the GUI, copy to another bucket within an instance via mounts, copy via the CLI, upload to some external resource, etc.) and the ways they can be restricted
• Add a boolean configuration option to the object storages (e.g. Sensitive storage)
• For all the storages, marked as Sensitive - enforce the "data-leak" prevention rules, which are going to be listed in (1)