Lock ACL rules - why not?

[skruq]

I wonder why there is no mecanism to be able to lock the "acl rules". I mean a lock like for the sysctl variable, if the lock is set, no more changes will be allowed to the ACL until a the computer reboot. Under selinux a similar lock exits and I wonder why there is no things like that under grsec.