We have feature request to Turn on encryption in S3 Connector . The internally reference number is CQ-30511.   Can you please file support request asking feature pack for CQ-30511.

1,2 achievable with oob & not sure why custom implementation is required there. 3:-   COuld not understand.4:-  you can do it using filter.5:-   update the cookie saml_request_path value to what ever url you need dynamically & do not need to depond on samlauthenticationhandler.

In aem5x it was standalone and in aem6x it is factory that is you can configure multiple handler.    Can you please tell your business case for extend & there may be otherways to extend.

Sounds like cf/assetfinder or custom search console or an old job executing the query.    To obtain the stacktrace of the code path which trigger this log is to use following Log config [1]   [1]   {0,date,dd.MM.yyyy HH:mm:ss.SSS} *{4}* [{2}] {3} {5} %caller{10}

Move both repository & datastore matching the default instalation. Update repository.xml file and then to migration.

Working on multiple sets make out of sync easily.   Why not map your local drive to assets using webdav so that you work on same copy & automatically in sync without need of link?

You can have the filter in dispatcher.any  [0] but it open access to all types and security risk is involved. Workaround would be either use [R] Or you can use Directory. In dispatcher.conf comment out [1] and add [2]. Let me know if issue resolve at your end by adding [2]. [0] { /type "allow" /glob...

The quickest approach would be Restore the instance before hotfix installation. Then install the hotfix.

which user you logged in to create project?

Without edit permission not able to annotate.