Feature: cib: Default ACL support to on
Feature: cib: Check ACLs prior to making the update instead of parsing the diff afterwards
Refactor: cib: Simplify ACL handling for read-only cib queries
Refactor: cib: Remove dead code
Fix: cib: ACL improvements
Refactor: xml: Add ACL flags for xpath selectors when tracking is enabled
Refactor: xml: Convert all ACLs to xpaths during unpack
Fix: xml: Support the creation of filtered copies based on ACLs
Fix: cib: Use the new acl filtering functionality
Fix: xml: Allow new objects to be created provided they subseqently match a configured ACL
Fix: cib: Switch over completely to the new ACL code
Fix: xml: Convert misbehaving #define into a more easily understood inline function
Fix: cib: Include a request with file-mode cib actions for the acl code to interrogate
Refactor: cibadmin: Purge legacy command options deprecated since 2008 to make the short-forms available for new options
Fix: cibadmin: Remove dangerous commands that exposed unnecessary implementation internal details
Fix: cibadmin: Allow priviliged clients to perform tasks as unpriviliged users
Refactor: cib: Implement CIB_file-mode ACLs for testing
Fix: xml: Unpack and apply ACLs when tracking changes
Fix: cib: Turn ALCs off so we can update version counters once the op is complete
Fix: cib: Respect the CIB_user environment variable for ACLs