Custom AclVoter to allow when ObjectIdentity doesn't exist