Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
Don't we have a generated type for the Items? It's weird that we need to handle a map.