Fixed ACR key construction (now it considers also workspaceId): W("workspaceId")/C("resourceId")/ACR("U0")