Don't call FSET_NT_ACL on file create if there's no SD to set. Leave the default...