Set machine_access to be a private attribute of machine, so the acl is