ACL xml fix

<acl> should be a direct child of <config>