[Dovecot] global ACL inheritances

Hello

I am trying to prevent people from actively delete lazy expunged messages.

ACL in following file does not appears to apply to existing or new mailboxes.

dovecot/acls/.EXPUNGED/.DEFAULT

owner lripk

Am I missing something, or is it due to ACL inheritances support?

mail_plugins = acl plugin { ... acl = vfile:/etc/dovecot/acls ... }

Thank KuiZ