I think you may be out of luck trying to do this with Win32::FileSecurity as it doesn't appear to expose this part of the API.

There is some code in the .xs file that related to the inheritance bits of the ACE, but it seems to be defined in terms of constants that are not exported.

Actually, the related code is a little bizaar on first reading, and I don't understand what is going on in there.

You could resort to doing with Win32::API, but going by xs code for W32::FS, that is distinctly non-trivial.

The easy alternative would be to shell out to cacls.