[BACKLOG-1562] Add support for ACL shadow nodes in repository - re-implement the Helper to avoid calling runAsSystem