[BACKLOG-1562] Add support for ACL shadow nodes in repository - re-imple...

...ment the Helper to avoid calling runAsSystem