I've been down this road before and gave up due to the complexity of this and time constraints . I opted to wrap SetACL. GL, and keep us posted. Here you go:

WMI Security Descriptor Objects
_________________________
-Jim

...the sort of general malaise that only the genius possess and the insane lament.