Allows ACLs/settings in model config

/to @bajtos @ritch 

The PR allows acls and other setting properties to be specified in model-config.json.
I prefer when the frameworks are loud when things are not as expected. Please add an `else` block to warn the user that "options" has wrong type.

Perhaps we can also add a warning if the toplevel `config` object has any properties that were not recognized? Not necessarily in this PR.