The acl token records information about Access Control Lists (ACLs).
The praudit -x command shows the fields of the acl token:
<acl type="1" value="root" mode="6"/>