acl-plugin: add startup-config section "acl-plugin" and heap/hash parameters