Working lint check for invalid default ACLs