internal/data/domainDefaults/acls/addefault_default.json

[
    {
        "Owner": "%DomainSID%-512",
        "DefaultOwner": true
    },
    {
        "Owner": "S-1-5-32-544",
        "Path": "CN=BuiltIn,%DomainDN%"
    },
    {
        "Owner": "%DomainSID%-512",
        "Path": "CN=Keys,%DomainDN%",
        "NoInheritance": true
    }
]