Allows a principal to perform any operation on a name, in-
  cluding modifying its ACS. Control access also grants other
  rights normally reserved only for the creator account or
  your namespace administrator group, such as the ability to
  replicate a directory or relocate a clearinghouse.  In a secure
  namespace, you should grant control access judiciously.