Allow managing ACL allow

[Mikaela]

Currently Mjolnir assumes that the user always wants to ACL allow *. I would like to allow * and specify other servers.

Example scenario: dynamic DNS or otherwise free DNS provider may present a scenario where the entire provider is ACL banned, but there may still be an appropiate user whose server should be allowed regardless of the ban.

Another example scenario is Onion services, some administrators may find it desirable to deny *.onion while allowing individual known good ones