Put IPv4-specific parts inside the ACL subsystem