ACLs on External Type Data

How would someone implement ACLs for data stored in external databases, accessed via external types?

@steveders ACLs won’t work on external type. It is a C3 concept backed by a type/data model that would never exist outside of C3.