Only apply masks on non-default ACL entries when setting the ACL.