RBAC action_list is not resource-specific

I am using the RBAC feature (st2 v1.5.1, Enterprise Linux) and am confused by action_list. When I put that in a role in the context of a particular pack I can see _all_ the packs, not just the expected pack.

I would expect that I could only see/list the packs and actions that I am permitted to see. Instead, if I am a member of a role that includes action_list then I can see all the packs and actions (in the Web UI and via st2 action list).

Below is a sample role definition.

---
name: "mc_salt_owner"
description: "Owner of mc_salt pack"
enabled: true
permission_grants:
    -
        resource_uid: "action:mc_salt.chef_solo"
        permission_types:
            - "action_list"

    -
        resource_uid: "pack:mc_salt"
        permission_types:
             - "pack_view"
             - "pack_create"
             - "pack_modify"
             - "pack_delete"
             - "pack_all"
             - "action_view"
             - "action_execute"