This was an old change I'd sent in a few years ago. I discovered it by looking at the code, while I was writing some ACL-manipulation code and was looking at the internals: acl_copy_entry() already sets the tag type, permset, and brand.