Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
I've tested UpdateACL with a brand new ACL, and it works, so I don't think we need "InsertACL".