DMU_OT_ACL and DMU_OT_OLDACL are both marked as objects that should be encrypted when the dataset has encryption enabled - because they are used for ZPL layer ACLs and are thus sensitive information.
I need to know what DMU_OT_SYSACL is used for so I can determin if i should be an encrypted object for encrypted datasets. -- Darren J Moffat