acl: fix tag C-string overflow