Because we reverted to the Draft standard ACL mask behaviour, we got
the old problem with "chmod(1)" back: it can't set group bits on files.
This was not as visible before because "ls" used to hide the group bits;
it now shows them.
touch file
chmod 604 file
setfacl -m u:casper:7,m:7 file
ls -l file
-rw----r--+ 1 root other 0 Jan 23 21:14 file
chmod g+r file
ls -l file
-rw----r--+ 1 root other 0 Jan 23 21:14 file
Work Around
Use "setfacl -m g::6", but no real substitute for chmod -R g+rX etc.