Turns out you can't expand ACLs after declaring them. Thanks, ambiguous squid documentation. Modify the ACL types to use the resource title as the ACL name to prevent duplicates.