How does installer provide the permission scheme for private lists?

The previous incarnation of PonyMail did not embed auth checks for access to private lists into the main code, instead it provided some examples that could be copied into place:

https://github.com/apache/ponymail/tree/master/aaa_examples

It is not clear how the installer is supposed to override the existing AAA in this version.

Start by reading the installer behavior and the examples in aaa_examples referenced by the issue, then compare them with the current private-list permission flow. Document or clarify how the installer supplies the authorization scheme and what configuration or copied example marks the work as complete.

Written by the indexing model from the issue text.