scripting ntacls: Do not place a SACL in the GPO filesystem ACL