s3-smbd: Call sys_acl_get_perm() directly rather than via the VFS