cn=config and ACL formatting