Glance not set proper acl in swift container

When using glance on swift with multitenant config and set swift_store_admin_tenant tenants then such tenants are not set for container when glance creates it. For example user is creating private image, glance will not set proper ACLs. It will do it when user will share his image with other tenant because then set_acls() method will be called - it is not called when image is created.
I test it with images with given "copy from" option so glance was downloading image from other server and upload it to swift.