deposit: PDFs private by default

Signed-off-by: Pedro Gaudêncio <pedro.gaudencio@cern.ch>