When EC Server is 11.0.0 and lower it checks if it can access Opscode-Account directly otherwise skips all user acls