better handling of windows ACLs