[acl] major internal rework

ACL internal management was somewhat broken and didn´t really
do what was advertised for dynamic links.

• fix ACL to be truely per host/link as public API advertise
• move ACL checking when host/link are known
• add extensive tests
• fix various minor bugs that went undetected for a bit
• enable access list testings on more tests

Signed-off-by: Christine Caulfield <ccaulfie@redhat.com>
Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>