Is serializeTo() only called in the client (while doing undochange)? Otherwise using acl_set_file instead of acl_set_fd() could be a security problem.