acl-binding

record acl-binding {
  resource-type: resource-type,
  resource-name: string,
  resource-pattern-type: string,
  principal: string,
  host: string,
  operation: string,
  permission-type: string,
}