review bucket permissions

[todd-dsm]

• user+admins full access only
• encrypt with KMS key

$ gsutil ls -Lb gs://
gs://tf-admin-${USER}/ :
	Storage class:			STANDARD
	Location constraint:		US
	Versioning enabled:		True
	Logging configuration:		None
	Website configuration:		None
	CORS configuration: 		None
	Lifecycle configuration:	None
	Requester Pays enabled:		None
	Labels:				None
	Default KMS key:		None
	Time created:			Sat, 23 Feb 2019 01:30:34 GMT
	Time updated:			Sat, 23 Feb 2019 01:30:36 GMT
	Metageneration:			2
	Bucket Policy Only enabled:	False
	ACL:				
	  [
	    {
	      "entity": "project-owners-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "owners"
	      },
	      "role": "OWNER"
	    },
	    {
	      "entity": "project-editors-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "editors"
	      },
	      "role": "OWNER"
	    },
	    {
	      "entity": "project-viewers-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "viewers"
	      },
	      "role": "READER"
	    }
	  ]
	Default ACL:			
	  [
	    {
	      "entity": "project-owners-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "owners"
	      },
	      "role": "OWNER"
	    },
	    {
	      "entity": "project-editors-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "editors"
	      },
	      "role": "OWNER"
	    },
	    {
	      "entity": "project-viewers-846430628442",
	      "projectTeam": {
	        "projectNumber": "846430628442",
	        "team": "viewers"
	      },
	      "role": "READER"
	    }
	  ]