revoke public read access should also revoke public write access

This commit was sponsored by The Hoodie Firm
with support from NLnet: http://nlnet.nl
http://go.hood.ie/thehoodiefirm