doc: acl spec