Create a acl_change_set_clear function to reset the AclChangeSet
and free the hashtable (if set). Use it to define an auto-clear
cleanup and use that wherever AclChangeSet is used so all the
hashtables get freed.