Make sure that an ACLS_NEED_MASK system strips a redundant mask