configure ACL: allow access until after a period of time?