PROTECTED

The keyword PROTECTED indicates that the ACE will be preserved if an attempt
is made to delete the entire ACL.  A PROTECTED ACE must be explicitly deleted.
The format for this ACE is:

            (type,OPTIONS=PROTECTED {,ACCESS=access_to_grant})

'type' may be any ACE type from the set: IDENTIFIER, ALARM_JOURNAL, or
DEFAULT_PROTECTION.  'access_to_grant' may be any of the set: READ,
WRITE, EXECUTE, DELETE, and/or CONTROL.