generic/529: use an ACL that doesn't confuse NFS