Replace roles with acls in hanger and container management

This is a carbon-copy of a post made less than 24 hours ago, which itself was a repost of an older idea.

Relevant portion of thread: