LIDS ACLs inheritance

File ACLs on a directory apply to all subdirectories

Capability ACLs can be inherited
indefinitely
a specified number of times (count of exeve calls)