Add PUT and PATCH on models/{modelname}/acls endpoint.

"401 Forbidden" sounds wrong to me.