env: Add support for access control to .flags