document an example usage of ACLs