NOJIRA Turns out doing ACLs on lists is hard. For now use (slow) row-based ACL function that now actually works as expected.