IP access list control was implemented as default success for an
empty access control list - but this had the effect of an empty list
default allowing if "Satisfy Any" was set.
Fortunately this was bugged, so empty lists default failed - but this
broke empty lists for "Satisfy All".
This patch is the correct fix: lists now always default fail, but an
empty list removes the check from access control considerations.
This restores the original implementations behavior and fixes the bug.
aca8206c30