Implement MSC2870 (Protect server ACLs from redaction)

crates/ruma-signatures/Cargo.toml

@@ -16,6 +16,7 @@ all-features = true
 [features]
 compat = ["tracing"]
 unstable-exhaustive-types = []
+unstable-msc2870 = []
 
 [dependencies]
 base64 = "0.13.0"

crates/ruma-signatures/src/functions.rs

@@ -74,6 +74,10 @@ fn allowed_content_keys_for(event_type: &str, version: &RoomVersionId) -> &'stat
             // TODO: Should we return an error for unknown versions instead?
             _ => &[],
         },
+        #[cfg(feature = "unstable-msc2870")]
+        "m.room.server_acl" if version.as_str() == "org.matrix.msc2870" => {
+            &["allow", "deny", "allow_ip_literals"]
+        }
         "m.room.history_visibility" => &["history_visibility"],
         _ => &[],
     }

crates/ruma/Cargo.toml

@@ -122,6 +122,7 @@ unstable-msc2654 = ["ruma-client-api/unstable-msc2654"]
 unstable-msc2675 = ["ruma-common/unstable-msc2675"]
 unstable-msc2676 = ["ruma-common/unstable-msc2676"]
 unstable-msc2677 = ["ruma-common/unstable-msc2677"]
+unstable-msc2870 = ["ruma-signatures/unstable-msc2870"]
 unstable-msc3245 = ["ruma-common/unstable-msc3245"]
 unstable-msc3246 = ["ruma-common/unstable-msc3246"]
 unstable-msc3440 = [
@@ -149,6 +150,7 @@ __ci = [
     "unstable-msc2675",
     "unstable-msc2676",
     "unstable-msc2677",
+    "unstable-msc2870",
     "unstable-msc3245",
     "unstable-msc3246",
     "unstable-msc3440",