SQL Storage should ignore ACEs with null user

The JCR storage security manager allows setting an ACE with a null user, it will be ignored (with a stack trace log) when stored in the document.
The SQL storage security manager should do the same, but currently it keeps the null which poses problems to user code not expecting it.