s4-selftest: Try a more complex ACL - this example from a GPO