unauthenticated mask
The maximum set of permissions granted when access to the object is not authenticated. Unauthenticated access is granted only if the caller matches some ACL entry (frequently the any_other entry) and if the required permission is granted by both the entry and the mask.