Private acl object support

Resolves #146 
![screen shot 2014-11-07 at 14 48 39](https://cloud.githubusercontent.com/assets/1770201/4954507/31f4ca6c-668d-11e4-841e-47c090eb5341.png)

$acl is set on the penultimate line