Allow @USER@ variable in ACLs

This saves a lot of ACL lines for users namespaces for example:

users:*               @ALL        1
users:@USER@          @USER@      8

darcs-hash:20070301230309-19e2d-90a00b70a2af546fd5194ade614c130e9f7864eb.gz