[CalendarServer-users] ACLs in new configuration scheme