Implement proper ACL checks and suid permission

Placeholder, not finished yet.
No, job can be pre-authorized by owner only. No read or write permissions matter here.