Rename a lot of the public API
Fix ACLs; ANY is for predicates, ALL is for perms