an Entity references as follows:
Cache ACLs by listing all granted resources, i.e. those the person in question does have access to. This mode is useful in situations where most resources are private.