Remove faulty by statement
Add externalservice_ prefix for external service group shortcuts to clear
the namespace for further changes.
Write ACLs for ou=Desktops subtrees separately and do not handle the
whole subtree as one. Needed to give modification permissions to
normal school admins.
Add Set.hosts definition