Draft: Use ConfigArgs in ACL parsing
For better error propagation back to config clients, also remove unconditional use of stderr.
parse_acl() was only partially converted, the rest remains to be done.
This was prompted by the discussion of stderr in ITS#9726. Not high priority.