Limited ACL for performance

The fact that an ACL can contain an ACE with a DENY on a principal creates complex rules that are hard to parse efficiently.
The ACLR optimization is an attempt to solve this problem but the cost to maintain a cache of ACLR per user is too high.
Using a limited ACL where we can only DENY Everyone enable to use array intersection operator to filter ACLR.