code: func (f *aclFilter) filterNodeServices(services **structs.NodeServices) {
  	if *services == nil {
  		return
  	}
  
  	if !f.allowNode((*services).Node.Node) {
  		*services = nil
  		return
  	}
  
  	for svc := range (*services).Services {
  		if f.allowService(svc) {
  			continue
  		}
  		f.logger.Printf("[DEBUG] consul: dropping service %q from result due to ACLs", svc)
  		delete((*services).Services, svc)
  	}
  }
docs: // filterNodeServices is used to filter services on a given node base on ACLs.