(PUP-1737) ensure bit flag masking order of operations
(PUP-1737) ensure bit flag masking order of operations

ferventcoder/puppetlabs-acl,MelanieGault/puppetlabs-acl,DSI-Ville-Noumea/puppetlabs-acl,puppetlabs/puppetlabs-acl,cowofevil/puppetlabs-acl,cowofevil/puppetlabs-acl,DSI-Ville-Noumea/puppetlabs-acl,cyberious/puppetlabs-acl,MelanieGault/puppetlabs-acl,ferventcoder/puppetlabs-acl,cyberious/puppetlabs-acl