The following command removes all ACEs that specify the principal
 .pjl.smith from the .admin directory and all its child directories.

 dns> remove subtree .admin... access .pjl.smith