Rework how ACLs are generated
    
    Split the rpms namespace repos vs the others which use the usual
    basic ACL from pagure.
    
    Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>