Tweak acl checking order to improve performance