I realize this is beyond old, but in case someone stumbles across this looking for an answer...Use the acl resource module with the "merge" state and it will not mess with any other entry other than what you specify. You can find documentation for th...