You can set the security attributes of a file in NT using API quite easily.
But when you are trying to get access to it and stuff...that requires a lot of token mucking about..And subsequently I would also like to know how it is actually hard-coded in vb.