My recommendation would be to use the gw/sim_mode after setting the gw/reg_no_conn_info correctly. You will get the exact syntax for the tags from the gateway security trace, and not other noise from conversation IDs and other requests.
Believe me, semi-colons is a better option. Tabulators and spaces are unreliable in my experience and latest they produce problems when the external program or user name contains a space in it, which they can.
Regarding the gw/acl_mode, perhaps it makes sense to attract Frank Buchholz 's attention to this in the EWA and perhaps have it removed or made dependent on the gw/reg_no_conn_info at least?
Cheers,
Julius