acl: allow zero verdict