Speed up TicketAcl

* only run those ACL modules with matching ReturnType/ReturnSubType
* only compute those parts of the ACL hash that are actually required