Fix #138: clear existing (local) ACL when saving ACL to server.

See #138.