Fix: acl: Ensure known users are not able to read the cib by default