use get_acl instead of direct __acl__ getattr