previously with an ACL for the path "/foo/bar" without propagation and a check for `&["foo", "bar/baz"] this code would return the ACL (roles) for "/foo/bar" for the path "/foo/bar/baz". Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>