Make acls endpoints return 405 for disallowed methods