HDFS-5849: Removing ACL from an inode fails if it has only a default ACL.
HADOOP-10270: correct display of group perms when there is only a default ACL.
HADOOP-10270: now displaying effective perms.
HADOOP-10270: add test to testAclCLI.xml.
merge HDFS-5849 to HDFS-4685-WIP with manual resolution of AclStorage.
Merge branch 'HADOOP-10270' into HDFS-4685-WIP