In the session ACL, we can use the keywords "localip" and "user" either as a source or a destination, but there is no definition in the documentation for these keywords.
For the "localip", is-it all the IP addresses assigned to the controller?
For the "user", is-it all the client IP addresses as there are listed in the user-table?