Atomicize canned ACLs (fall back to XML)