acl visibility and bugfixes, fixes #267, #223