resolve compile time constants for accesscontrol group names