fs: add a set_acl inode operation