Using generic ACL structure.
Add sanity checks (if key is not present, do not include the condition). We still have more conditions to handle.
This will be done once confd can handle check for keys (not just directories)