how would you configure the extended acl for scalability? in other words, how could you set up the extended acl to avoid having to modify the acl every time you add a new host?