use `json.load(acl_fd)` instead.

Also, why does this take an fd instead of a string?