client-test: add more ACL tests