s4:dsdb/acl_read: give some variables a better name