def make_acl_token(roles):
    pass