add setfacl call on deployments