[kronosnet/kronosnet] 9c352a: more fun_acl_check fixes