consul: FSM support for ACLsg