Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
Maybe we can move this to Client level too, it's bucket related.