I'm filing this in case it turns out this module needs to provide some kind of install profile version of node_access_rebuild()...

I'm enabling content_access module in my profile and creating its settings. I'm also creating some nodes of a type that should be locked from anon users.

When I complete my install and manually rebuild node access, all works as it should.

However, putting a node_access_rebuild() at the end of my hook_profile_tasks() doesn't work.

Either I get all nodes accessible, or if I try node_access_rebuild(TRUE) I get nothing in the node_acess table at all, and so NO nodes are accessible.