haloACL compatibility, fix reparsing, prevent overwriting canonical ACLs with a non-canonical redirect