A restore from backup succeeds and permissions drift

A backup workflow is simplified and later disaster-recovery testing reveals restored trees have the right files but the wrong ACLs or xattrs.