Group-based ACL. Fixes #13.