Acl resource + assertion class proxy for lazy load