revamp ACL rules
add pkg plugin to search python package at remote servers