Poor usability of S3 Bucket encryption

[skinny85]

When I say:

const key = new kms.Key(this, 'Key');

new s3.Bucket(this, 'Bucket', {
  encryptionKey: key,
});

I get a validation error:

Error: encryptionKey is specified, so 'encryption' must be set to KMS (value: NONE)

This customer experience is not up to the CDK bar. If you know what should be specified in the encryption property, why are you forcing me to do it? Why should I have to tell you I want encryption twice?

(Now, if I explicitly specify both encryptionKey: key and encryption: s3.BucketEncryption.Unencrypted (note: different enum constant name than the NONE in the error message above!), fine, hit me with that validation error. But it should not happen by default)