No one has given me an argument for why we really need to have security descriptor preservation in the immutable package cache. Given the file system mechanism differences between 4.6 and 5x, it is like comparing apples and oranges. Securing the CoW is only possible.