COOK-3156: fix grants.sql statement when root_network_acl specified