**Describe the bug** Calling `allow-contract-caller` with a `until-burn-ht` value in the future, results in stacks function to fail with permission denied. **Steps To Reproduce** 1. deploy a contract that calls e.g. `delegate-stx` 1. make a `allow-contract-caller` call with a `until-burn-ht` 1. call the contract function that calls the genesis `delegate-stx` function 1. see the error `9` permission denied. **Expected behavior** The contract call should fail only after `until-burn-ht` block has passed. Reporting it here as discovered with @yknl