Upgrade of existing acl classes to 3.x

All test passing and shells working
I'm not comfortable with this direct assignment. Would it be possible to just load it as an association?