refactored to enable alternate acl lists and better logging