Don't explicitly set private ACL
s/publicAcl/publicReadAcl/