svc_acct.dir should be editable with ACL (#1730)