Move some access check functions that are not posix-acl specific