rusty-gd: migrate classic acl to a directory, in prep for facade

Bug: 171749953
Tag: #gd-refactor
Test: gd/cert/run --rhost
Change-Id: I3a54a514a36b0071585536888f791f29f22f015c