```release-note:improvement
acl: Downscoped AllowClientOp to node pool
```
