Correctly mock #describe_network_acls filtering