[#36] Fix how boolean flags are honored when deny_by_default is enabled

- Essentially, if deny_by_default is enabled, we need to build the list
  of flags differently, as the AclFactory creates allow rules instead of
  deny rules in that situation.
Merge branch 'hotfix/36'

Close #36