Ntfs supports alternative data streams so they probably use that to record the unix permission byres