Fix some template typos that had too many or not enough spaces and newlines.
Add support for external ACLs. Add a convenience class for declaring LDAP group external ACLs.