[Bug 5555] authzTo ACL check for wrong principal