Add kms to s3 remote state module

[mcgirr]

Initial attempt to add server side encryption to the s3-remote-state module to support

https://www.terraform.io/docs/providers/aws/r/s3_bucket.html#server_side_encryption_configuration

for https://www.terraform.io/docs/backends/types/s3.html#kms_key_id

Contributes to #310

• Update the changelog
• Make sure that modules and files are documented. This can be done inside the module and files.
• Make sure that new modules directories contain a basic README.md file.
• Make sure that the module is added to tests/main.tf
• Make sure that the linting passes on CI.
• Make sure that there is an up to date example for your code:
  - For new modules this would entail example code for how to use the module or some explanation in the module readme.
  - For new examples please provide a README explaining how to run the example. It's also ideal to provide a basic makefile to use the example as well.
• Make sure that there is a manual CI trigger that can test the deployment.

[ketzacoatl]

LGTM, feel free to merge!