Add acl-modify util

(Lightly tested only)