make ACL take a string instead of a fd
addressed mess in tinyurl