target: move node ACL allocation to core code