For storage backends that support it, could return signed download urls for uploaded files as an option