Private acl object support

Resolves #146 
I'm struggling to think of a use-case where someone would want thumbnails to be private. I'm thinking we default to the original image could be private but all resized images always public.