update acl
Refine #1355. This commit also deprecates hiding non-VPN service notification on lockscreen.