Generally your right. But attachment_fu seems to set the acl on each object. I tried setting the ACL on my test container, but it made no difference.