acl-plugin: fallback to linear ACL search for fragments