Fix: cib: ACL improvements
Refactor: xml: Add ACL flags for xpath selectors when tracking is enabled