client-test: leak in test_acl()