web_admin: do not fail on wrong ACL