add ACL support for federated bots