[SECURITY] Use ACL.impersonate to avoid a race condition giving elevated privileges.