We've had some cargo culting of the access "refs/meta/config"
stanza, so let's remove it where it exists.
A follow-up patch will consolidate all puppet-* module acls into
a single acl that also has this fix once change
I1837cef4610d23406d34b15cc949df62a616d960 merges.
Change-Id: Idde43c5b0ed49649e41bb9c9ee699ae8824fb068