Object security inheritance is unimplemented

This is probably the reason for most of the
(..\..\ntoskrnl\se\accesschk.c:253) HACK: RemainingAccess = 0x00000004 DesiredAccess = 0x00000004
prints that appear in the debug log.
For example, an event object created in the NT object root will currently inherit the object root directory's ACLs, even though none of them are marked as inheritable. This means the ACLs for many objects are just broken and it's no wonder that opening them results in what would be an access denied situation.

SeAssignSecurity has a couple FIXMEs for this.