Performance improvements for set-based ACLs?