- Changing ACLs requires javascript
  -> don't use ajax to change ACLs
- Slow
- Spammy
  -> group ACLs changes to reduce spam level
- Group package ownership

