ACLs are not checked for duplicates on creation

Currently there is no check if a ACL is already present for a specific agent and accessTo combination.

There needs to be a "createOrUpdate"-like functionallity.