https://github.com/dotnet/runtime/blob/master/src/libraries/System.IO.FileSystem.AccessControl/tests/FileSystemAclExtensionsTests.cs#L475
In checking out some helix machines, I found various leftovers from these tests, some of which result in creating files and directories which are specific deny-acl'ed for all users.
Ideally any changes done like this could be cleaned up via a finally() block, since if a real user runs these tests locally their personal temp folder could be clogged up with the same.