the same two policies as the object loader, with the same defaults
Optional
the nodeset's AccessRestrictions: kept, or dropped (the default)
the nodeset's RolePermissions: kept (the default) or dropped
the same two policies as the object loader, with the same defaults