>better permissions by default (mandatory access control, acls, etc.)

i thought some unixen had acls?

i remember reading some man pages about that, i think on an svr4 box, back in the day.