chef_acl resource

Sorry, what is complete?  I'm unclear what this is intended to do.

If the intent is to remove just the read rights from user xx and group yy, this is what you write:

```ruby
chef_acl 'nodes/x' do
  remove_rights :read, :users => 'xx', :groups => 'yy'
end
```

I'm actually not sure what other permutations there are given the "remove_rights" specification.