The setacl command is currently limited to simple public/private policies. The attached patch adds a acl-grant option which enables granting access to specific users.
Patch to add acl-grant option to the setacl command
I think it would be interesting for --acl-grant to be available in sync command.
(s3cmd version 0.9.9.91)