Sync ACLs

[wijnanjo]

We can now create ACLs based on one or more spec files and we can delete ACLs by specifying an ACL filter. Wouldn't it be great to have this in one go? Basically, I'm looking for a convenient way to fully "synchronize ACLs": create new ACLs and delete existing ACLs that are not in the specfile.

For all of our environments we keep a single spec file listing up all the ACLs. A simple --delete flag on the create acls command would activate this behavior.

Any thoughts on this?
I'm willing to contribute