You may add the jaas.conf option
-Djava.security.auth.login.config=/PATH/jaas.conf
You may also specify -D to set options
"hbase.zookeeper.quorum" (it should be in hbase-site.xml)
"zookeeper.znode.parent" (it should be in hbase-site.xml)
Use -set-acls to set the ACLs, no option to erase ACLs