extend permissions to parse explicit ACLs in headers