even more acl/container/group, mostly group work. go fmt too.