ACL to deny deletes but allow entry creation.