update KV api for ACLs