(type, option_flags, access_to_grant)
          ^

This item indicates how the ACE is to be utilized.  Protection
checking, security auditing, etc.  It may be any of the following:

        IDENTIFIER
        ALARM_JOURNAL
        DEFAULT_PROTECTION