Blocker Description
Currently, comma doesn't seem to be allowed in AclCommand when specifying allow-principals and deny-principals. However, when using ssl authentication, by default, the client will look like the following and one can't pass that in through AclCommand.
"CN=writeuser,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown"