Allow defining acls in vcl