code: function processAuthResultForEntity(err, entity) {
  
          if(stopAll) return
  
          if(err && err.code !== ACL_ERROR_CODE) {
            stopAll = true
            callback(err, undefined)
          } else {
  
            if(entity) {
              filteredEntities.push(entity)
            }
            callbackCount ++
            if(callbackCount === entities.length) {
              callback(undefined, filteredEntities)
            }
          }
        }
docs: this closure is evil