After reading through the doc, I see that most of the examples specify their `target` as the `title`:

<pre>
acl {'c:/windows/temp':
  ensure => present,
  permissions => [{identity => 'tim',rights => [read,execute,list]}],
}
</pre>

I like the simplicity of that, for example, you could define resource defaults:

<pre>
Acl {
  ensure => present,
  permissions => [
    {identity => 'system', rights => [full]},
    {identity => 'administrators', rights => [full]}
  ]
}

acl { 'c:/windows/temp': }
acl { 'c:/windows/system32': }
...
</pre>

Then later we could add the ability to specify a `type`, e.g. file, registry_key, etc.