Root does not respect default ACL?

This is an ancient decision (Maybe @rdm remembers why this was choosen) that ends up requesting a more restrictive persmission set that then one you allowed.

At the moment I do not know whether this was a decision made to implement user request or to deal with challenge in the implementation of file permission at the time.