agent: Handle service ACLs when doing anti-entropy