epass2003: Allow pubkeys with stricter ACLs