Add in-item acl conditions before the find, instead of applying them afterwards