chore($DRY) #1092 - DRY out internal param/endpoint store, prepping for dynamic ACLs
feat($dynamic-acl) closes #1092 - allow dynamic canned ACLs (per-file)