Dt/remove custom acls

Remove support for bypassing external authz acl checks with default acls returned internally; this was originally done for uncle Ned but is now no longer needed.