I found several inconsistencies in ACL code. In particular, "macro" and "macro_list" rules are completely broken.