group_also=True: also list objects with proper acl level for group owner_also=False: also list objects owned (but wo/ acl perm)
