HDFS-5595: refactor on FSPermissionChecker#toAccessControlString.
HDFS-5595: route set permission methods through AclManager.
HDFS-5595: AclManager minor clean-up.