1) put lsacl(1) into ls(1) .  ls needs a "-A" option :-)

2) make cp(1) copy the file's acl to the destination file.

3) when execve(2) is checking for any IEXEC permission
   ( i.e., "(ip->i_mode & (IEXEC|IEXEC>>3|IEXEC>>6) == 0)" ),
   check for an acl entry which has IEXEC permission.

4) come up with a default acl when creating files and directories.
   Multics allows defaults at the user/directory level.  a compromise
   might be to allow a default at the user level, and store it in the
   u area, ala umask(2).

5) increase the size of an acl.  this requires putting the acl somewhere
   other than the inode, or increasing the size of the inode beyond 128 bytes.


