hmm, no public read ACL?