acl match AND

[dxlr8r]

The way it is now, acl seems to be OR based, so:

acl:
  - match: {account: "admin",ip: "127.0.0.0/8"}

Either would match, what I would like to see is both needing to be true for it to be a match.