Interesting that this isn't working for you in Kingston.  What patch are you on?  We were on patch 3.

The ACL is here (update your instance name):  https://instance_name.service-now.com/nav_to.do?uri=sys_security_acl.do?sys_id=ffd83d68db42320002533691f0b8f504