(cisco, or any) acl *reducers* out there?