Simplify TicketAcl code a bit

no functional changes, just some simplifications (and avoidance of hash copying) found while reading through the TicketACL code.