ticket-3723, ACL method to check if aco is inherited from its parent

No tests and only for DbAcl yet. Perhaps someone could take this as a
starting point.