restrictPublicBuckets