[imp] Add ACL `core.options` and take care of display the fieldset. Closes #4975.