oops, adding multiple-rightname support broke ACL caching, bringing it back should...