NXP-14552: don't touch read_acl when updating a proxy or restoring a version