(1) The flags in acl.c for fakereject allowed it in too many places. It