make 'repositorydetermined' the default
The parameter ACLPropagation in applyACL is optional but has no default.