only show Link: <...acl>; rel=acl when user has at least read access to it?

[bblfish]

Plus:

• This would at least remove the "danger" of clients following a link to which they don't have read rights to.
• It would

Minus:

• On the other hand would it would require one to add another link to a resource that the browser can use to log in.

[bblfish]

Perhaps issue solid/solid#111 (Implement: WWW-Authenticate: ClientCertificate on a GET) would allow us as a hint to a user to tell him that he can get more rights if he were to authenticate - such as perhaps the link to the ACL.

[bblfish]

This is related to Solid issue 29: Current Container Listing mechanism does not support hidden resource use case and other issues referenced from there.