chef_acl resource

I'll have it use something other than raw_json to store rights, that makes sense.  raw_json happens to exist in most of these, and can be used by people who have retrieved the raw json from the server and modified it.  It's an alternate way to set the json that will be sent to the server.