fix fallout from more granular ACLs for payments, RT#10505