Constant SE_GROUP_USE_FOR_DENY_ONLY 

pub const SE_GROUP_USE_FOR_DENY_ONLY: i32 = 16i32;