Why don't Fedora provenpackagers have global write ACLs in RPM Fusion?