update README with ACL details