Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
We're actually putting a single access control list rule, not a list. We need better naming for ACL methods, or prefer not to be a perfectionist for this case.