Transactionalize acl updating