Security settings for document are not handled by CustomTreeNodeHandler

This is caused by this setting doesn't affect directly the data of document. You can use OnAfterInsert method of CustomDataHandler instead (there comes SimpleDataClass object in dataObj parameter and it contains ClassName equal to 'ACLItem').