this ACL was previously untested, which allowed a regression to go undetected. (cherry picked from commit e3ee1380)