Minor Description
when retrieving the effective policies for a given set of principals, the resulting immutable ACLs currently lists all entries present on that policies even if not matching the set of principals. this could be improved by filtering the displayed entries and just expose those matching the specified set of principals.