Sync Designate ACLs

This change sync's designate ACLs with the other project in
the openstack/ namespace.

The only exception is stable/* in the designate repository,
where designate-core retain approval rights.

Change-Id: Ie14946e5f749a0c91e382dac0b06abefd4234ee2
Merge "Sync Designate ACLs"