Allow control over the creation of different TopLevelItems from the ACL

But `isApplicableIn` not checked here? (Ditto for copies.)