Tweak Hiera settings to allow source ACL to be configured properly