ACL: DAV:privilege element - multiple child elements?

Hi,
RFC3744 defines DAV:privilege as:

<!ELEMENT privilege ANY>

"ANY" technically implies one or more child elements. However, all examples 
in 3744 have just a single child. It has been my assumption that only one 
child is allowed. However, I recently came across a server that is 
returning multiple child elements. So what is, or is not, allowed here?

-- 
Cyrus Daboo