ACLs can be emulated directly with a lot of user groups; but I'm pretty sure Unix permissions + parent access control is enough for most applications.

It's not technically impossible to change a universe's name; that constraint was lifted a while ago. I'll add it soon.

Thanks for the message regarding the security issue. Not as bad as I thought.