sharing one bucket across multiple hdp clusters, restricted access to data, Ranger plugin

Newbie questions to ecs. pls. advise.

1) Is there a way to share one bucket for one or more HDP (Hortonworks Data Platform). Hope, there is no strict one-to-one mapping between one cluster and one bucket.

2)     Does Object Store support only data at rest encryption (transparent encryption). If this is the case, then this only protects against disk getting stolen and accessed. Anyone who has is part of ACL can access the data. This does not prevent a superadmin from accessing the data by adding himself to the ACLs. Is there a way to specify that even super admin cannot access a particular sub item in data stored in an object. For example, in a Hive table, we can state that PIN number column is protected and cannot be even accessed by admin.

3) Can a Ranger agent be installed in ECS. If a Ranger agent is not available, is it possible to develop one?

If not, does ECS have similar or more sophisticated data protection when compared to that of ranger

Thanks,

Mohan