Acl: Handle case when 'admin' key is set to false + tests

See: b811d73