aclstore: a persistent store for ACLs This makes it easy for a service to add role-based access controls for a fixed set of roles.