When AceSize is less than 8, the fixed 4-byte header plus 4-byte Mask
are not contained in the ACE. The existing len(data) < aceSize check
passes (len(data) may be >= 8) but later slices like data[4:8] and
data[offset:aceSize] panic with 'slice bounds out of range'.
Fixes#23.