Expose ACI functionality to users

There are various elements of functionality within Cisco ACI that would be beneficial if made available as a configuration option to end users. E.G. Use of ESGs/EPGs to control communication between VSIs within the pod. Having a GUI/CLI method to create security groups (or equivalent) and then an interface to allow/block communication, effectively exposing a rudimentary version of the underlying ACI contract mechanism would be useful.