This sounds perfect, i don’t need ACL for my usecase. A header would be ideal, happy to test branches!