"ACL-aware filtering" is the term I didn't know I was looking for, thank you!