[security] Disable default ACLs on files