Skip static ACL entries that don't match the property

/to @ritch 
/cc @superkhau 

The PR optimizes the ACL matching by skipping static entries that don't apply to the property.
Can you clarify this comment? AFAIK it is correct.