Implement proper ACL checks and suid permission

Placeholder, not finished yet.
@pkit ^