Set the put-acl to private by default so one doesn't leak sensitive data accidently

This one caught me by surprise the first time I used s3funnel.