my understanding of it is this: we only support 1 ACL per node (for whatever reason). Therefore, if one is already there, no more ACLs can be added. Otherwise, there's the possibility to add one.