The word "below" there is misleading since the ACL is now *above* this field.  Before changing it we need to verify that this is the case in all places where we use these two fields (e.g. contribution/session protection).