[kelnos]

Filesystem ACLs are part of the puzzle, certainly, but are insufficient if they're the only mechanism.