A short thread about ACLs or Capabilities for another layer of security starts here – read through for some explanation.  Work like this, though interesting, has to wait until the userland vfs/clustering work is done.