Looks like I have lost the the argument on the ACLs. Do you want to resend a version of this rebased to the current tree, or should I do it? We probably should get this into 3.15 so that our tmpfile doesn't behave different from everyone else in the release where we introduce it.