code: func (f *aclFilter) filterServices(services structs.Services) {
  	for svc := range services {
  		if f.allowService(svc) {
  			continue
  		}
  		f.logger.Printf("[DEBUG] consul: dropping service %q from result due to ACLs", svc)
  		delete(services, svc)
  	}
  }
docs: // filterServices is used to filter a set of services based on ACLs.