ACL updates and security patch for local file paths