relay_acl: bug fix and regression test