Track user access changing and enable multi-prefix

This also changes the format of user.access.