[security] ACLs are refreshed after a refresh tree for the currently selected node