Move acls to vrt_ctx