removed insecure and autopublish, added collection access rules