consul/agent/structs/aclfilter
..
filter.go
filter_test.go