Fix a bug in merging ACLs

/to @ritch