Only attempt UrlAcl if running with admin priv