ACL.applyto always writes access ACLs and ignores the flag parameter when the ACL is applied to a file descriptor (or file-like object, probably).
While it would be great to fix this, I don't suppose that's easily possible. It seems to be a limitation of the underlying acl_set_fd function.
I think this limitation should at least be documented for pylibacl.