[Zope] Clarification regarding acl_user