access_createnode acl also applies to auto created nodes (thanks to Matthias Rieber)