Docs: usability of malware ACL condition