windows: handle inherited ACEs in ACLs

'Inherit' access-control entries (ACEs) are currently not handled. They should be, though, because this often results in permissions missing from items.

There are multiple ways to deal with this:
- Calculate or retrieve the "effective" ACL with only EXPLICIT_ACCESS ACEs.

This has the advantage that no further processing has to be done when extracting.
The disadvantage is that one inherited ACE is replicated across all files/directories it affects, even after extraction.
- Create EXPLICIT_ACCESS ACEs in root items from their "effective ACL"

Advantage: ACLs will be inherited inside the directory structure, even after extraction.

Disadvantage: More complex than option 1, and also requires special treatment when extracting only subset of a full archive