https://mamchenkov.net/wordpress/2018/04/25/understanding-ad-access-control-entries/