HEAD requests are allowed by default and checked for ACL's when using DAVACL_Resource