code: private boolean isAceExcluded(final List<AceFlag> aceFlags, final AceFlag excludedFlag) {
          boolean res = false;
          if (excludedFlag != null) {
              // aceFlags could be null if the ACE applies to 'this object only' and has no other flags set
              if (aceFlags != null && !aceFlags.isEmpty() && aceFlags.contains(excludedFlag)) {
                  res = true;
              }
          }
          LOG.debug("isAceExcluded, result: {}", res);
          return res;
      }
docs: Checks whether the AceFlags attribute of the ACE contains the given AceFlag of the AceAssertion. If the
  {@code excludedFlag} is null, or the {@code aceFlags} are null (or empty), or are non-null and do DO NOT contain
  the excluded flag, a false result is returned. Otherwise, a true result is returned.
  
  @param aceFlags
  list of AceFlags from the ACE
  @param excludedFlag
  AceFlag disallowed by the AceAssertion (e.g., {@code AceFlag.INHERIT_ONLY_ACE})
  @return true if AceFlags is excluded, false if not