start generalizing acl endpoint handling