checkpoint: add acls, missing yaml file, disable owning my resolv.conf