Implement proper ACL checks and suid permission

Placeholder, not finished yet.
Okay, can you please add a comment explaining that here?