Fix #338: make 'acl' lazy load, remove 'get-acl()'