python/ntacls: Convert ntacls to use s3 flags