No need for ACLs since everything on the public side is managed thru Nodes.