Fix finding ACLs from ObjectIdentity's with different types