syslog-ng as non-root user? (and misc acl syntax questions)