use abstract options factory for acl config