update_managed_permissions: Pass around anonymous ACI rather than its blacklist
    
    It turns out the ACI object of the anonymous read ACI, rather than just the
    list of its attributes, will be useful in the future.
    Change the plugin so that the ACI object is passed around.
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>