DO

Indicates that the current Access Control Entry is complete and ready for
parsing.  This terminates an insertion.  It may be given at any position
within the Access Control Entry.