(maint) noting the bug with deny aces
(maint) updating Init.pp
(PUP-1737) specs deny/same user
(PUP-1737) documentation with sample usages