This work will be non-trivial. The thought goes as follows:

• Fork trigger.acl
• Put all new ACL-related changes into this project; backport them into trigger.acl in the near-term as necessary
• Once this project is stable, remove it from Trigger core
• Replace core functionality with "contrib.acl" functionality that is optional and can be toggled in the global settings.