Sort so that sub-directory ACLs get applied after parent directory ACLs