Groups with ACL

[black-ghost-off]

I have two groups of devices(temp sensors, pressure sensors(for example), two db mqtt_user

{
  "_id": {
    "$oid": "66dea59834e17968c96c5150"
  },
  "username": "root",
  "password": "test",
  "is_superuser": true
}

and mqtt_acl

{
  "_id": {
    "$oid": "66decb8a170ac49571e86773"
  },
  "group": "sensorList1",
  "permission": "allow",
  "action": "all",
  "topics": [
    "sensors/sensorList1/%devicename%"
  ]
}

{
  "_id": {
    "$oid": "66decb8a170ac49571e86773"
  },
  "group": "sensorList2",
  "permission": "allow",
  "action": "all",
  "topics": [
    "sensors/sensorList2/%devicename%"
  ]
}

How do I write a filter in authorization/detail/mongodb? The documentation does not answer these questions accurately.

Second question: how to configure to have the same username and deviceId(clientID).(or remove username altogether, only clientID)

Third question: How to implement ACL via tls (each device should have its own tls key)