Docs: say explicitly where an ACL definition ends