Directory (enforceAccessDirective): __OLCSUFFIX__ placeholder. Refs #2757

Some ACLs depends on actual backend olcSuffix attribute. The
placeholder is replaced with the value from the backend dynamically.