allow api-users to hide messages
updated ARO/ACO data