Constant SE_GROUP_USE_FOR_DENY_ONLY 

pub const SE_GROUP_USE_FOR_DENY_ONLY: u32 = 16;