ACL condition with AND

That can get difficult to maintain, when you have several actions for the same condition (for example setting multiple headers). If the condition changes, you then have to change it in several places instead of just one.