This sanity checks ACLs during initialization and also omits sending the header when set to PRIVATE which is the default.