The users and user groups that one ACL component allows or denies read access to. Additive
automatic components have already been merged into this component, and pseudo-users have already
been resolved to concrete users and groups, so the arrays can be applied as they are.