What are the two main types of access control lists (ACLs)?