Actually if we want to go with all 3 options I would add a separate config, something like:
spark.history.ui.acls - 
 - ACLS_ON
 - ACLS_OFF
 - ACLS_USER_SETTING