I've never seen one using acls on registry keys. I have however seen several config files for the same program with different permissions. Think .ssh/config or

I've never seen one using acls on registry keys. I have however seen several config files for the same program with different permissions. Think .ssh/config or /etc/sshd_config. For your partial config / single source of trust please refer to ansible.