bootacl property of the domain should be writeable
The BootACL D-Bus property is currently read-only; there is no reason why this could not be writeable so clients could modify the bootacl according to the users need. There is already an internal methods for batched bootacl updates: bolt_domain_bootacl_set