Add limited support for Solaris 10 ZFS-style ACLs: just enough to