New `-extends` option

You can now use -extends option to find vulnerable ACEs in the Schema and in adminSDHolder.
The loop for checking rights has been optimized and you'll only see FULL_CONTROL when the user has full control over the target