Make oc-chef-pedant run
User key is "username" (not "name") on EC
Make the requestor the one who "created" the object.
No sense making ACLs for it all the time.
Fix defaults for clients group
ORG/organization/_acl -> ORG/organizations/_acl
Automatically associate creator with org
Support alternate syntax for groups.actors
Skip USAG tests, we're seriously not gonna make them
Make org creator automatically an admin
Fix default acls to match oc-chef-pedant
Both organization/_acl and organizations/_acl exist
Make _acl wrong method raise 404 instead of 405
/organizations/ORG/organization/_acl/create should 404
Include both org owner and superuser in org acls
Clients have access to themselves
Fix data acl defaults (was not taking container into account)
Allow groups and containers to be indexed by either of 2 keys
clients created w/org do not own themselves;
containers created w/org do not follow org rules
Move owners_of to AclBase
Build full acls for groups; don't give new container objects
any groups by default