orca unseals Shell Folder Redirects, migrates them, and reseals them back to the correct DACL/object owners to comply with Microsoft Best Practices.