Make aclcontains() do something that's at least vaguely reasonable:

it now returns true if the aclitem argument exactly matches any one of
the elements of the aclitem[] argument.  Per complaint from Wolff 1/10/01.