Although we should never get here, perhaps a more useful message like "Unexpected access control entry type." just in case?  You never know :)  Also, is the TODO on the following line still relevant?