Private acl object support

Resolves #146 
Would be better to put this conditional inside each of the hook functions so that we only run the underlying SQL query when the hooks are executed.