In my situation external auth script returns "access_level" as kv_pair. If this value was changed then two values appeared at once in annotation and acl for high access level will be matched. It's possible to add functionality for marking keys as singular?