Incorrect second call to ACL would wipe out the real call - found
by 'ilovezfs'.