build: sync the waf ACL checks with configure.in