Support ACLs without a specific user/group

Allows ACLs without specific users or groups for default ACLs on directories. Also adds the "other" ACL scope for the same purpose.