Allow control over the creation of different TopLevelItems from the ACL

Huh? `Item` implements `AccessControlled`.