fix(AclPermissionService): use /get-my-acls endpoint to avoid using trusted token when not needed