You can clone with
The service layer's ContainerACL for blobs has two unneeded properties: Etag and LastModified. According to the documentation at http://msdn.microsoft.com/en-us/library/windowsazure/dd179391, those values are not used. This is validated experimentally; any values can be passed for those properties and the request goes through successfully.
Those two properties should be removed.
Actually, it looks like the same class is used for inputs for setContainerAcl and as output from getContainerAcl. I'd suggest that it is cleaner to lift the Etag and LastModified properties out of ContainerAcl into the GetContainerACLResult class.