Low: tools: cibadmin renders ACLs only when output is cib element

It's impossible to render ACLs otherwise. We would instead get an error
from the ACL library functions.

Currently output consisting of a cib element can only happen for query
commands that fetch the full CIB.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>