[cvsnt] Why does chacl require a local checkout?

[bwhicks at aep.com]

Since acl's are recursive, if I want to just put a catch-all in the top
level directories of a repository, why do I have to checkout the full
repository? if I have a repository called "test" with 30 gigs of files and
directories in it and I want to set a group of users to have read-write
access and everyone else to read-only, why can't I run a command like:

cvs chacl -a read,nowrite,notag,nocreate,nocontrol test

without doing a full checkout of the whole 30 gigs of stuff? It just
doesn't make sense to me...

Thanks...

Brian