Re:ACLs - allowing a user to add a new attribute