acl metadata should be within a list