Update acls in the domain model

This change brings the domain model up to speed with the v1 stack by
issuing calls to store.set_acls whenever
 - an image is saved into the database (and locations are set)
 - a member is added to an image (and locations are set)

related blueprint glance-api-v2-image-sharing

Change-Id: I45f10752f6c04646b65f86e44b59bdeea534f024
Merge "Update acls in the domain model"