/transientStateFolder CAMID("::Everyone") read deny write deny execute deny traverse grant setPolicy deny