acl: introduce a macro for bitmask conversion