Fix for filtering preloaded acl by sids

Added possibility to pass security identities to acl provider.
Moved acl manager service class to parameter to enable service extending.