common: Refactor ACL converter

This commit makes a refactor of ACL converter to allow performing additional
checks before real ACL object creation. It's needed at least for proper default
ACLs handling.

Change-Id: Ia306b42eb7b7b0a108a8b3413d72102972692658