S3 consistent ACLs