Skeleton for external acl checking program.

* code is still messy but the general idea is there.
* I finally used environment to propagate information such as command, subcommand
* The args supplied by the remote user are passed as arguments to the checking program.

* TODO:
- handle case when stdin is supplied (should be supplied as STDIN to the checking program as well ?)
- handle option to supply extra command arguments