Pin minimum chef dependency to 11.8
Add many comments to chef_acl, remove redundant **