ACL type validation

This fixes some things that were incorrect in the acl type and
adds validation to the type for the items passed in
ACL :target_type

Defaults to :file and only accepts file for the first
release.