Clarify fabric requirements: supporting auth requres supporting acls

This is how things work with existing fabrics. Making it the rule makes
things easier for API users.

Signed-off-by: Andy Grover <agrover@redhat.com>