TODO: s4:netcmd/gpo.py: we should also convert the SACL to a filesystem one...