NXP-13723: updateReadAcls only on save(), not all flushes