adds public-read to asset acl