Possibility to refer to a `remote` from an `acl`

Would be useful to have a way for minimizing IP address duplication.