Comment 2 for bug 1581454

This was dealt with, well arguably mostly in https://review.openstack.org/#/c/258280/
Which pushes the referrer into the subrequests that are send to the segments container so the acl's can be matched.

The segments container will still need acls sent. But this is known and expected.