support updating ACLs