improve access control options, deprecate globaladdressbook_readonly option