[Samba] Worm VFS module not working?

[Aaron C. de Bruyn]

I'm beginning to think the 'worm' VFS module might not be working.

I've spent the last 30 minutes or so playing around with it...and I *swear*
I had it working when I implemented it about 6 months ago...but it lets me
delete/rename/modify any file.

Here's a sample share definition from one of my NAS boxen:

[archive]
     comment = Archive Folder
     path = /tank/archive
     acl allow execute always = False
     guest ok = False
     read only = False
     valid users = adebruyn
     vfs objects = worm shadow_copy2 full_audit
     worm:grace_period = 300


If I connect to the archive folder, I can delete anything--even files with
dates from 2016.

Is there something to the vfs objects ordering or maybe the module is
broken in my really super old 4.9.5-Debian package?

Thanks,

-A