There are two BrokerAccessControlList.toString methods that allow you to convert the contents of an ACL to a string. One allows you to specify the number of 4-character spaces that are used for indentation.