It looks like we previously were setting `CONTAINER_INHERIT_ACE` and `OBJECT_INHERIT_ACE` on non-directories. Was this essentially a no-op? The change seems to make sense, but being unfamiliar with windows I'd like to be sure there's no unintended side-effects of this change. @adamedx, can you comment on this?