Add mechanism to hard-code the provenpackager permissions

When querying the package's ACL info, we add automatically the
group::provenpackager except for some packages listed in the configuration
file.