root_network_acl must be a kind of array