Is the cfs sa -clear option supposed to be able to remove a acl entry?

It seems to remove the wrong user..

[bkc_at_eiger coda]$ cfs la /coda/usr/bkc
System:Administrators  rlidwka 
      System:AnyUser  rl      
[bkc_at_eiger coda]$ cfs sa -clear /coda/usr/bkc System:AnyUser rl
[bkc_at_eiger coda]$ cfs la /coda/usr/bkc
      System:AnyUser  rl      


Here it has removed System:Administrators, not System:AnyUser

Possibly related to the reversed ids in the initial pdb setup?

GROUP System:Administrators OWNED BY bkc
  *  id: -2
  *  owner id: 500
  *  belongs to no groups
  *  cps: [ -2 ]
  *  has members: [ 500 ]
GROUP System:AnyUser OWNED BY System
  *  id: -1
  *  owner id: 1
  *  belongs to no groups
  *  cps: [ -1 ]
  *  has members: [ 1 ]

###

Hmm, it seems to always remove the last entry.

[bkc_at_eiger coda]$ cfs sa /coda/usr/bkc bkc all
[bkc_at_eiger coda]$ cfs la /coda/usr/bkc
      System:AnyUser  rl      
                 bkc  rlidwka 
[bkc_at_eiger coda]$ cfs sa -clear /coda/usr/bkc System:AnyUser rl
[bkc_at_eiger coda]$ cfs la /coda/usr/bkc
      System:AnyUser  rl      


Brad Clements,                bkc_at_murkworks.com   (315)268-1000
http://www.murkworks.com                          (315)268-9812 Fax
netmeeting: ils://ils.murkworks.com               AOL-IM: BKClements