Provides indirection between ACL packages and domain objects.