Private acl object support

Resolves #146 
I'm not seeing the `$check_serve` param being used anywhere. If it's still used, please update the doc block to better describe why it is needed and what it does.