Set facl permissions only once

Fixes issue #409.

As I'm not a ruby dev, maybe it could be improved. 

Let me know.