config: allow chacl to be in any directory in $PATH