set defaults correct for encrypt/acl and set default acl to be private