ACL entity wildcard conditions tests

- also, split the tests into smaller chunks