@jfroy Good to know. The file was being copied by NSFileManager, so I got an NSError saying to fix using Get Info, which doesn't show ACLs.
OK, I don't manually restore from Time Machine again. Files came back with weird permissions, that I couldn't see, necessitating admin privs