add another implementation of a file ACL module

this is neither intended to exist alongside the current acl module, nor to
replace it, but to provide input which (I hope) can contribute the current acl
module's development