[moin: heirarchical ACL vulnerability]
Not a specific vulnerability, rather a security-related behaviour change, see bug
