2.2.2.21.2.4 NewVersionComponentAccessDeniedACE
The NewVersionComponentAccessDeniedACE type represents an ACCESS_DENIED_ACE as specified in [MS-DTYP] section 2.4.4.4, where the access mask is a NewVersionComponentAccessMask (section 2.2.2.21.1.3).
A field of this type MUST be an ACCESS_DENIED_ACE ([MS-DTYP] section 2.4.4.4). Furthermore, the Mask field MUST be a NewVersionComponentAccessMask. The AceFlags subfield of the Header field is not meaningful and SHOULD be zero.