AclProxy: small optimization