add ACL alias types

[wojcik91]

Introduce ACL alias types to clarify how aliases should be handled when translating ACLs into firewall rules.

An alias can be one of two types:

• destination alias - this alias defines a complete destination and is translated into a separate set of firewall rules
• component alias - this alias is treated as a component of the destination defined in an ACL rule; this means that IPs, ports and protocols defined in this alias will be combined with those manually configured in an ACL rule and be a part of the default set of firewall rules created for an ACL

[wojcik91]

closes #1088