ACL: add full rights copy for tickets to resolve connection counting, fixes #2349