update access control docs for CLI commands