acl sets: Add has_any and has_all functions