fix opDynamicAclRoute throws fatal error when using allow_empty option (fixes #3721, BP from #3507)