TODO: add "dead" device node ACL handling