FSS created custom ACLs on the fly; use a similar approach but based entirely on node attributes and/or configurations.
