SetACL for Command-Line Permissioning

SetACL looks like a saucy little alternative to approaches I've taken here before:

• Unlike CACLS it uses a simple permission language -- no SDDL
• Unlike CACLS and chmod(1) it works on services, registry keys, shares and printers
• Unlike SubInACL it's not mental

I think I need to get familiar with this.....