Better aclpolicy syntax error reporting #858

All error messages will be sent to the "audit" log via log4j

Fail fast for policy document parse errors