HDFS-5612: implement ACL enforcement logic.