Newbie: Consul ACL Always Disabled

Hi,
Newbie learning consul for the purpose of orchestrating database servers with Patroni. The machines are generic physical amd64 machines running Debian.

A GET from Patroni to consul returns “permission denied.” I assume that to mean I enable ACLs, then allow GET. According to the files in the git repo from here: Deploy Consul on VMs | Consul | HashiCorp Developer
I add

acl {
  enabled = true
  default_policy = "allow"
  enable_token_persistence = true
}

to /etc/consul.d/consul.hcl and restart. Node rejoins the other two, but, acl is still disabled.
consul acl bootstrap
Failed ACL bootstrapping: Unexpected response code: 500 (rpc error making call: ACL support disabled)
No idea where I’ve gone wrong. And, yes, I know “allow” isn’t okay. Just want to get acl bootstrap done.
Here’s the error from the server side:
[ERROR] agent.http: Request error: method=PUT url=/v1/acl/bootstrap from=127.0.0.1:51694 error=“rpc error making call: ACL support disabled”

Here’s version info:
Consul v1.16.2
Revision 68f81912
Build Date 2023-09-19T19:29:18Z
Protocol 2 spoken by default, understands 2 to 3 (agent will automatically use protocol >2 when speaking to compatible agents)

Answering my own question, when I added the acl {} bits to the other two nodes, then consul acl bootstrap worked.