ACL xml fix

<acl> should be a direct child of <config>
Merge pull request #3 from kassner/patch-1

ACL xml fix