Tarsnap.

You can create a key that has write only access for your automated backups and a different key that has full access for administrative purposes.

That is what we do anyway.