(type, option_flags, access_to_grant)
                    ^

This item defines any options to be applied to the ACE.  Directory
default ACEs, protected ACEs, etc.  It may be any of the following:

        NONE            DEFAULT
                        HIDDEN
                        PROTECTED
                        NOPROPAGATE