When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_A...