resolve KAZOO-785: also check if the ACL entry authorizing id is the resource being saved