root/private: links for acl-access-control