Move ACL handling to an optional plugin. Most users don't care. We don't
want their LMS to crash due to some missing module.