clean config setting
Refactor ACL implementation