Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
Unfortunately, the storage client returns a map[string]interface{} here.  :-(