public void replay(RemoveAccessControlEntryRecord record) {
        StandardAcl acl = idToAcl.remove(record.id());
        if (acl == null) {
            throw new RuntimeException("Unable to replay " + record + ": no acl with " +
                "that ID found.");
        }
        if (!existingAcls.remove(acl)) {
            throw new RuntimeException("Unable to replay " + record + " for " + acl +
                ": acl not found " + "in existingAcls.");
        }
        log.info("Replayed RemoveAccessControlEntryRecord for {}, removing {}", record.id(), acl);
    }
The AclControlManager manages any ACLs that are stored in the __cluster_metadata topic.
If the ACLs are stored externally (such as in ZooKeeper) then there will be nothing for
this manager to do.
metadata/src/main/java/org/apache/kafka/controller/AclControlManager.java