special() now supports
0xAD,url - get ACL: returns "ACL" in metaData as samba acl string
0xACD,url,sid,ace - modify ACL: replaces the ACE string of SID on URL