diff --git a/guix/scripts/substitute-binary.scm b/guix/scripts/substitute-binary.scm
index 8e08bf1172..f61d06a05c 100755
--- a/guix/scripts/substitute-binary.scm
+++ b/guix/scripts/substitute-binary.scm
@@ -630,9 +630,10 @@ substituter disabled~%")
    (with-error-handling                           ; for signature errors
      (match args
        (("--query")
-        (let ((cache (delay (open-cache %cache-url))))
+        (let ((cache (delay (open-cache %cache-url)))
+              (acl   (current-acl)))
           (define (valid? obj)
-            (and (narinfo? obj) (valid-narinfo? obj)))
+            (and (narinfo? obj) (valid-narinfo? obj acl)))
 
           (let loop ((command (read-line)))
             (or (eof-object? command)