This ACL should allow all permissions for the owner of the pod and deny everything for public access.