Write a spec on how to deal with the path prefix for DBs and Salti

[yaronyg]

We host the ACL on a path prefix (/dbs) that the ACL doesn't know about. Because we are trying to be generic. So we either need to hard code in that path or we need to come up with a cooker to transform the ACL from a version without the path to one with the path. Alternatively we can just hard code that path into our ACL and if it changes we need to update the ACL.