Table ACL: make SimpleAcl private