TAC attributed the issues I was seeing to https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwm56280. Basically they say its cosmetic so no feature request to update. Tested by removing the problematic lines from the template and the conflicts go away....
Same issue here. Our ACLs for VTY access, on a multitude of devices with the same template and network profile, says "Conflicts with intent" and always presents a conflict just for this one device. Looks like new bug.
