Extract ACL from headers for bucket creation