ACL entry creation restricted to objectClass