$ set security /class=file -
    /acl=(identifier=[*,*], option=default, access=none) 'p1'
$ set security/class=file -
    /acl=(identifier=gst_ro, option=default, access=read) 'p1'
$ set security/class=file -
    /acl=(identifier=gst_re, option=default, access=read+execute) 'p1'
$ set security/class=file -
   /acl=(identifier=gst_s, option=default, -            access=read+write+execute+delete) 'p1'