New, clean installation of tomcat bundles with one change: PACL is enabled.
Though I did initially start Liferay without PACL enabled just to complete the basic configuration (I accepted the defaults on the Basic Configuration webpage). I then restarted Liferay with PACL enabled.
Related bug report: https://issues.liferay.com/browse/LPS-34062
This related bug report does not mention PACL, so I am creating this new bug report.