adds ACL to config - ensures files are readable once uploaded