low: cliformat: Don't show extraneous id for acl rules
test: Add some ACL unit tests