While console ACLs seem to work somehow, I could not find a way to limit
the destination when restoring a job. Well in my example below it uses
restore-my but still I can modify restore-my to restore to any directory I
want (and thus posing a problem if the machine is shared among users).
Also it would be nice if on restore and then listing jobs only the valid
jobs/filenames of the ones in JobACL were shown (currently I can see all
as MyCatalog has them all...)