Update acls on creation and don't always through a spurious error