To be honest, I'm not convinced about making `ACLField` implicit to the name of the field. I'd rather keep listing the roles explicitly, and especially not force the `is_` prefix. But that's for design of django-ldapdb.