Fix setting of item permissions, so those not given are property
revoked. Move actual processing into AclManager.