This would be ideal to use with AWS Lambda, but it has a requirement that files are readable by all users (otherwise a cryptic error about unpacking the zip is generated).
Might be easiest to just set the extended attributes to all files to 644, or to preserve the current behavior by default then maybe an option would be better.