Re: ACLs to allow users to traverse DIT down to their own entry, lock down everything else