Major Description
We have the ability to run both with and without zk acls, but we don't have a great way to switch between the two modes. Most common use case, I imagine, would be upgrading from an old version that did not support this to a new version that does, and wanting to protect all of the existing content in ZK, but it is conceivable that a user might want to remove ACLs as well.