objectClass names in ACLs