Add a new extra API endpoint listing all the pending ACL requests