FYI,
Vadim Nasardinov,
who wrote up some useful little notes on permissioning back c. ACS
4.0.1, tells me that the
acs_object_context_index
table
used to cache the permissioning stuff, "grows polynomially with
respect to the average number of descendants that an object has, and
exponentially with respect to the depth of the context tree".