In Section 4.2, the third paragraph says: "The access control information in the subtreeACI attribute applies to each entry down the subtree unless it is overridden by an entry-specific entryACI whose values are more specific." Can't a subtreeACI also be overridden by another subtreeACI lower in the tree, and shouldn't that be noted in the paragraph? Rick Huber