we can't query the ACL on a new file till it exists!