profile: try to keep the default htsp profile even when not set in ACL
profile: don't create duplicate profile when it's not enabled