Verify ACIs are added correctly in tests
    
    To double-check the ACIs are correct, this uses different code
    than the new permission plugin: the aci_show command.
    A new option, location, is added to the command to support
    these checks.