Private posts options

Functional implementation of private posts with an ACL selector (needs skinning), an example using status, and core status selectors in entity save. Also fixed the ACL lookup so it uses an array not an object (mongocursor iterator doesn't have an object accessor, so can't be used in this way)

Still a little bit of a W.I.P, but pushed so that many hands can look...