code: func newAPIsProvider(acls map[string]*pb.APIResource) *aclsProvider {
  	aclPolicyRefs := make(map[string]string)
  
  	for key, acl := range acls {
  		// If the policy is fully qualified, ie to /Channel/Application/Readers leave it alone
  		// otherwise, make it fully qualified referring to /Channel/Application/policyName
  		if '/' != acl.PolicyRef[0] {
  			aclPolicyRefs[key] = "/" + ChannelGroupKey + "/" + ApplicationGroupKey + "/" + acl.PolicyRef
  		} else {
  			aclPolicyRefs[key] = acl.PolicyRef
  		}
  	}
  
  	return &aclsProvider{
  		aclPolicyRefs: aclPolicyRefs,
  	}
  }
docs: // this translates policies to absolute paths if needed