Improved ACL security
Made implementation store order consistent between 0install and 0store-service
Fixed handling of relative paths in "0install store" sub-commands

(need to be turned absolute in case they get passed into other processes)