acl: make MACIP ACL apply/unapply/delete logic more robust