acl: support entry removing by '' and correct acl with dntype