python/ntacls: we only need security.SEC_STD_READ_CONTROL in order to get the ACL