AclManager API

I have some thoughts for the future of the AclManager API; trying to make it as flexible as possible, here are some example uses:

<?php
$aclManager->add($user)->to($comment)->with(MaskBuilder::MASK_OWNER)->flush();
$aclManager->add('ROLE_SUPER_ADMIN')->to($comment)->as('class')->with(MaskBuilder::MASK_IDDQD)->flush();
$aclManager->addDefaults()->to($comment)->flush();

$aclManager->remove($user)->from($comment)->flush();
$aclManager->remove(MaskBuilder::MASK_CREATE)->from($user)->for($comment)->flush();