infrastructure for reflexive ACLs in flowlog
more reflexive acl work