Currently, ACL can't assign ownership to an object to its parent item (e.g. VirtualMachineObject or Bitlocker recovery keys)