acl: forbid rule with priority zero