ACLs: Implement support for Pacemaker ACL schema 2.0 (bnc#894012)

This replaces the existing ACL support for schema 1.2 with
partial support for schema 2.0. All configurations previously
possible are still possible, except roles need to be defined
for all rules (rules cannot be applied directly to users).

There is no support for schema 2.0 ACL groups included in this
patch.

Note that a bug in crmsh prevents configuration of multiple
roles for a user, use of a version of crmsh where this is fixed
is necessary.
GUI: Detect and disable ACLs if CIB schema version is < 2.0
Merge pull request #6 from krig/acl-2.0

GUI: Implement support for Pacemaker ACL schema 2.0 (bnc#894012)
GUI: status: Add support for exit-reason (bnc#889914)

OCF scripts can pass back a failure reason string before exiting that
Hawk can display as part of the error message.