s4-provision: Fix error message to contain the string SSDL of the failed-to-match ACL