ACL: log failures
At the moment, errors related to bad TSIG keys are not logged. Some logging would be useful.
We probably don't want to log all failures. I suggest to always log serious errors (e.g. bad TSIG key) and all the other errors (e.g. bad IP address) with the debug severity.