Как правильно готовить ACL?

$ umask
0022
$ mkdir ~/tmp/facl
$ getfacl ~/tmp/facl
getfacl: Removing leading '/' from absolute path names
# file: home/process/tmp/facl
# owner: process
# group: Users
user::rwx
group::r-x
other::r-x

$ setfacl -m d:g:data_managers:rwX ~/tmp/facl
$ getfacl ~/tmp/facl
getfacl: Removing leading '/' from absolute path names
# file: home/process/tmp/facl
# owner: process
# group: Users
user::rwx
group::r-x
other::r-x
default:user::rwx
default:group::r-x
default:group:data_managers:rwx
default:mask::rwx
default:other::r-x

$ touch ~/tmp/facl/z.z
$ getfacl ~/tmp/facl/z.z 
getfacl: Removing leading '/' from absolute path names
# file: home/process/tmp/facl/z.z
# owner: process
# group: Users
user::rw-
group::r-x                      #effective:r--
group:data_managers:rwx         #effective:rw-
mask::rw-
other::r--