NT ACL / Security descriptor checking function

[Luke Kenneth Casson Leighton]

> 	http://www.fas.org/irp/nsa/rainbow/tg020-a.htm

section 6.7 is a good jump-in point to this 95-page document.

you're right, there were thorough - good for them!