```release-note:feature
agent: return the default ACL policy to callers as a header
```