make Installation objects secure by default (setDefaultACL doesn't apply to them)