Isn't this is an example of where checking ACLs results in loading the JCR Node?