Use bitfield macros for acl-where