acl: fix unneeded trie splitting for subset of rules