Made it possible to specify origins in access.conf

We wanted more functionality in our access.conf. Now its able to specify origins for users and the services they should be able to access via PAM.
This is a bit confusing. Could you give an example output of what this key in Hiera would produce?