[BUG] file.directory.win_perms doesn't correct permissions in case of deviating permission even with win_perms_reset

Description
the file.directory.win_perms and win_perms_reset don't set the correct permissions in case of deviating permissions.

Explanation:
I have a folder called testdir in C:\Admin, so C:\Admin\testdir
On this System I have the following (wrong) permissions set (see Screenshot "Wrong Permission" for visual)

allow, SYSTEM, Full Control, NONE inheritance, this folder subfolders and files
allow, Administrators, Full Control, NONE inheritance, this folder subfolders and files
allow, testuser, Full Control, NONE inheritance, this folder subfolders and files

Testuser, however isn't allowed to have "this folder, subfolders and files". I want to correct deviating permissions with a state.

The correct permission would be like this (see Screenshot "Correct and expected permissions" for visual)
allow, SYSTEM, Full Control, NONE inheritance, this folder subfolders and files
allow, Administrators, Full Control, NONE inheritance, this folder subfolders and files
allow, testuser, Full Control, NONE inheritance, subfolders and files

Setup
States used to reproduce this

# Make sure C:\Admin exists
{{ sls }}_adminFolderExists: 
  file.directory: 
    - name: 'C:\Admin' 
    - win_perms_reset: true 
    - win_owner: Administrators 
    - win_perms: 
        Administrators: 
            perms: full_control 
            applies_to: this_folder_subfolder_files
        SYSTEM: 
            perms: full_control 
            applies_to: this_folder_subfolder_files 
    - win_inheritance: false

# Make sure C:\Admin\testdir exists
{{ sls }}_testdirFolderExists: 
  file.directory: 
    - name: 'C:\Admin\testdir\' 
    - win_perms_reset: true 
    - win_owner: Administrators 
    - win_perms: 
        Administrators: 
            perms: full_control  
        SYSTEM: 
            perms: full_control
        testuser: 
            perms: full_control 
            applies_to: subfolders_files
    - win_inheritance: false

debug log:

[PROFILE ] Time (in seconds) to render 'C:\ProgramData\Salt 
Project\Salt\var\cache\salt\minion\files\base\windows_default\states\files_and_directories\init.sls' using 'yaml' renderer: 0.006020784378051758
[DEBUG   ] The functions from module 'config' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded config.option
[DEBUG   ] The functions from module 'file' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded file.directory
[INFO    ] Running state [C:\Admin] at time 11:20:41.541873
[INFO    ] Executing state file.directory for [C:\Admin]
[DEBUG   ] Resetting permissions for C:\Admin
[DEBUG   ] Getting current permissions for C:\Admin
[INFO    ] The directory C:\Admin is in the correct state
[INFO    ] Completed state [C:\Admin] at time 11:20:41.564052 (duration_in_ms=22.179)
[INFO    ] Running state [C:\Admin\testdir\] at time 11:20:41.659060
[INFO    ] Executing state file.directory for [C:\Admin\testdir\]
[DEBUG   ] Resetting permissions for C:\Admin\testdir\
[DEBUG   ] Getting current permissions for C:\Admin\testdir\
[INFO    ] The directory C:\Admin\testdir\ is in the correct state
[INFO    ] Completed state [C:\Admin\testdir\] at time 11:20:41.690758 (duration_in_ms=31.698)
[DEBUG   ] File C:\ProgramData\Salt Project\Salt\var\cache\salt\minion\accumulator\1985296711632 does not exist, no need to cleanup
[DEBUG   ] The functions from module 'cmd' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded cmd.run
[INFO    ] Executing command attrib in directory 'C:\Users\Administrator'
[DEBUG   ] output: 
[DEBUG   ] The functions from module 'state' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded state.check_result
[DEBUG   ] The functions from module 'highstate' are being loaded by dir() on the loaded module
[DEBUG   ] LazyLoaded highstate.output
local:

          ID: windows_default.states.files_and_directories_adminFolderExists
    Function: file.directory
        Name: C:\Admin
      Result: True
     Comment: The directory C:\Admin is in the correct state
     Started: 11:20:41.541873
    Duration: 22.179 ms
     Changes:   
----------
          ID: windows_default.states.files_and_directories_testdirFolderExists
    Function: file.directory
        Name: C:\Admin\testdir\
      Result: True
     Comment: The directory C:\Admin\testdir\ is in the correct state
     Started: 11:20:41.659060
    Duration: 31.698 ms
     Changes:   

Please be as specific as possible and give set-up details.

• [ x] VM (VMWare) - Windows Server 2022

Steps to Reproduce the behavior
There are no errors. It even says the suspected folder is in correct state even though the permissions of testuser are deviating.
Comment: The directory C:\Admin\testdir\ is in the correct state

To reproduce this, a user needs to have full control on a folder with "applies to" this folder, subfolders and files (see the screenshot "Wrong Permissions").
The state needs to look like the given state above.

Expected behavior
The expected behavior is, that the testuser in this case loses it's permission of "full control" applies to "this folder, subfolders and files" and instead is granted a permission of "full control" applies to "subfolders and files"

Screenshots
Wrong Permission:

Correct and expected permissions:

Versions Report

Start at the file.directory entry point and trace handling for win_perms_reset, win_perms, and applies_to on Windows. Reproduce the provided C:\Admin\testdir scenario on Windows Server 2022, then verify that a deviating testuser ACL is detected and corrected to subfolders_files without reporting the directory as already correct.