BAC-872: do not send multiple ACL requests