Nils, I did post it on zfs.discuss when I realized it was a better place. I did get a good reply:
> The entry with the inheritance flags of "fdi" is an inherit only ACE which > does NOT affect access control and is used for future propagation to children > of the new directory. > > This is done since chmod(2) *may* under some situations alter/reduce the > permission(s) of ACEs that affect access control. A chmod(2) operation never > alters "inherit only" ACEs. This then allows future directories/files to > always inherit the same ACL as its parent, or parents parent and so on. Andrew > Hi Andrew, > > this is interesting, I can reproduce the behavor on snv_111. > > One might argue that converting one :fd- ACE into a :fdi (inherit only) > a non-inheritable ACE upon inheritance is semantically equivalent, but I > don't understand yet why this is happening. I'll have a look. > > BTW, moving this discussion to zfs.discuss might be more appropriate, as > this seems to be a general ZFS issue not limited to NFSv4. > > Nils