add public read_access_group by default
allow dots in catalog paths