Update the hierarchy for access control constraints.

This pull request is to update the hierarchy of both the XML and the domain model regarding access control constraints so that it is all contained by a common parent allowing for the addition of siblings.